3.17
Default Security Settings in Configuration Files
Section 3.17.1, server.xml
Section 3.17.2, web.xml
Section 3.17.3, tomcat.conf