How can I prevent Tomcat 404 page displaying when uri starts from /WEB-INF or /META-INF ?

[Former Member]

Hi everyone! The problem is when we have url like "https://somesite.com/WEB-INF" or "https://somesite.com/META-INF" Tomcat 404 page is displayed with current Tomcat version (not our custom 404 error page). Moreover it looks like this problem appears on each hybris site (I've checked it on 5 different sites). During investigation I found that problem is in StandardContextValve:26 where request path is checked on containing of WEB-INF and META-INF keywords. Tomcat allows customization of some valves, but I didn't find any information about this one. Could someone help me with this problem? Is there are any possibility to replace this valve or how did this problem solved on your project? P. S. variant with adding of to web.xml not fully covers this case, because we loose lots of important data that is set in filters etc.