DOCKER-462 Changed defaults of new tomcat settings

Author: kpiot123

README.md

@@ -73,8 +73,8 @@ in the following tables, are the values that are used when the environment varia
 | TOMCAT_MAX_HTTP_HEADER_SIZE                         | 32768                            | Maximum http header size                                                                                                                                                                                                                                                                                 |
 | TOMCAT_MAX_THREADS                                  | 200                              | Maximum number of threads                                                                                                                                                                                                                                                                                |
 | TOMCAT_ALLOW_CASUAL_MULTIPART_PARSING               | false                            | Set to true if Tomcat should automatically parse multipart/form-data request bodies when HttpServletRequest.getPart* or HttpServletRequest.getParameter* is called. The default is false.                                                                                                                |
-| TOMCAT_ALLOW_MULTIPLE_LEADING_FORWARD_SLASH_IN_PATH | true                             | Tomcat will collapse multiple leading / characters at the start of the return value for HttpServletRequest#getContextPath() to a single /. The default is true.                                                                                                                                          |
-| TOMCAT_CROSS_CONTEXT                                | true                             | Set to true (the default) if you want calls within this application to ServletContext.getContext() to successfully return a request dispatcher for other web applications running on this virtual host. Set to false in security conscious environments, to make getContext() always return null.        |
+| TOMCAT_ALLOW_MULTIPLE_LEADING_FORWARD_SLASH_IN_PATH | false                            | Tomcat will collapse multiple leading / characters at the start of the return value for HttpServletRequest#getContextPath() to a single /. The default is false.                                                                                                                                         |
+| TOMCAT_CROSS_CONTEXT                                | false                            | Set to true if you want calls within this application to ServletContext.getContext() to successfully return a request dispatcher for other web applications running on this virtual host. Set to false (the default) in security conscious environments, to make getContext() always return null.        |
 | JAVA_XMS                                            |                                  | -Xmx                                                                                                                                                                                                                                                                                                     |
 | JAVA_XMX                                            |                                  | -Xms                                                                                                                                                                                                                                                                                                     |
 | DEBUG                                               | false                            | -Xdebug -Xrunjdwp:transport=dt_socket,address=8000,server=y,suspend=n                                                                                                                                                                                                                                    |

tomcat-base/src/shared/main/java/eu/xenit/alfresco/tomcat/embedded/config/DefaultConfigurationProvider.java

@@ -20,8 +20,8 @@ public TomcatConfiguration getConfiguration(TomcatConfiguration baseConfiguratio
         baseConfiguration.setSharedClasspathDir("/usr/local/tomcat/shared/classes");
         baseConfiguration.setTomcatCacheMaxSize(100000);
         baseConfiguration.setAllowCasualMultipartParsing(false);
-        baseConfiguration.setAllowMultipleLeadingForwardSlashInPath(true);
-        baseConfiguration.setCrossContext(true);
+        baseConfiguration.setAllowMultipleLeadingForwardSlashInPath(false);
+        baseConfiguration.setCrossContext(false);
         return baseConfiguration;
     }
 }

tomcat-base/src/shared/test/java/eu/xenit/alfresco/tomcat/embedded/config/DefaultConfigurationProviderTest.java

@@ -26,8 +26,8 @@ void testGetConfiguration() {
         expected.setSharedClasspathDir("/usr/local/tomcat/shared/classes");
         expected.setTomcatCacheMaxSize(100000);
         expected.setAllowCasualMultipartParsing(false);
-        expected.setAllowMultipleLeadingForwardSlashInPath(true);
-        expected.setCrossContext(true);
+        expected.setAllowMultipleLeadingForwardSlashInPath(false);
+        expected.setCrossContext(false);
         assertEquals(configuration, expected);
     }