2.8
Default Security Settings in Configuration Files
Section 2.8.1, server.xml
Section 2.8.2, web.xml
Section 2.8.3, tomcat8.conf