How to enable HttpServletRequestValve? Is it enabled by default?
Put these in WEB-INF/context.xml
<Context> <Valve className="org.jboss.web.tomcat.security.HttpServletRequestValve"/> </Context>