5.6
Default Security Settings in Configuration Files
Section 5.6.1, server.xml
Section 5.6.2, web.xml