2.9
Default Security Settings in Configuration Files
Section 2.9.1, server.xml
Section 2.9.2, web.xml
Section 2.9.3, tomcat8.conf