您不仅可以使用JVM参数设置属性，还可以使用System.setProperty以编程方式设置属性，如下所示：

System.setProperty("org.apache.tomcat.websocket.DISABLE_BUILTIN_EXTENSIONS",String.valueOf(true));

如果您使用嵌入式tomcat将项目导出为JAR文件，则可以在执行SpringApplication.run之前在main中运行它：

public static void main(String[] args) {
    System.setProperty("org.apache.tomcat.websocket.DISABLE_BUILTIN_EXTENSIONS",String.valueOf(true));
    SpringApplication.run(YourApplicationClass.class,args);
}

如果您将应用程序打包到WAR文件中，您可以尝试以下操作：

@SpringBootApplication
public class YourApplicationClass extends SpringBootServletInitializer {
    @Override
    protected SpringApplicationBuilder configure(SpringApplicationBuilder application) {
        System.setProperty("org.apache.tomcat.websocket.DISABLE_BUILTIN_EXTENSIONS",String.valueOf(true));
        return application.sources(YourApplicationClass.class);
    } 
}

在Tomcat 10.1中，DISABLE_BUILTIN_EXTENSIONS选项是removed，因此dan1st的答案不再有效。
我设法通过使用过滤器从请求头中删除permessage-deflate来禁用压缩：

@Component
public class WebSocketHeaderFilter implements Filter {

    @Override
    public void doFilter(ServletRequest request, ServletResponse response, FilterChain chain)
            throws IOException, ServletException {
        HttpServletRequest httpRequest = (HttpServletRequest) request;
        HttpServletResponse httpResponse = (HttpServletResponse) response;

        HttpServletRequest req = new HttpServletRequestWrapper((HttpServletRequest) request) {
            @Override
            public String getHeader(String name) {
                if ("Sec-WebSocket-Extensions".equalsIgnoreCase(name)) {
                    return "";
                }
                return super.getHeader(name);
            }

            @Override
            public Enumeration<String> getHeaders(String name) {

                if ("Sec-WebSocket-Extensions".equalsIgnoreCase(name)) {
                    return Collections.enumeration(Collections.emptyList());
                }
                return super.getHeaders(name);
            }
        };

        chain.doFilter(req, httpResponse);
    
    }
}

在我的例子中，简单地清除头的值就足够了。但由于客户端可能会请求其他WebSocket扩展，因此最好从头文件中删除permessage-deflate。