1.12.8 Do not allow additional path delimiters (verify ALLOW_ENCODED_SLASH is set to false)
Information
Being able to specify different path-delimiters on Tomcat creates the possibility that an attacker can access applications that were previously blocked by a proxy like mod_proxy.