10.6 Enable strict servlet Compliance

Information

The STRICT_SERVLET_COMPLIANCE influences Tomcat's behavior in several subtle ways. See the References below for the complete list. It is recommended that STRICT_SERVLET_COMPLIANCE is set to true.

Solution

Start Tomcat with strict compliance enabled. Add the following to your startup script:
-Dorg.apache.catalina.STRICT_SERVLET_COMPLIANCE=true

See Also

https://workbench.cisecurity.org/files/266

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Unix

Control ID: 0c8435d960c7751a22929331156a55d4020ac5627163d7f90f52824db3348562