<?xml version="1.0" encoding="UTF-8" ?>

<web-app xmlns="http://xmlns.jcp.org/xml/ns/javaee" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://xmlns.jcp.org/xml/ns/javaee

http://xmlns.jcp.org/xml/ns/javaee/web-app_4_0.xsd" version="4.0">

<!-- The default servlet for all web applications, that serves static -->

<!-- resources. It processes all requests that are not mapped to other -->

<!-- servlets with servlet mappings (defined either here or in your own -->

<!-- web.xml file). -->

<servlet>

<servlet-name>default</servlet-name>

<servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>

<init-param>

<param-name>listings</param-name>

<!-- GOOD: Don't allow directory listing -->

<param-value>false</param-value>

</init-param>

<load-on-startup>1</load-on-startup>

</servlet>

<servlet>

<servlet-name>default</servlet-name>

<servlet-class>org.apache.catalina.servlets.DefaultServlet</servlet-class>

<init-param>

<param-name>listings</param-name>

<!-- BAD: Allow directory listing -->

<param-value>true</param-value>

</init-param>

<load-on-startup>1</load-on-startup>

</servlet>

</web-app>