The web.xml Deployment Descriptor Elements in Oracle\'s BEA WebLogic Server 8.1 Documentation pretty much sums up each element in a web.xml file. But I am also curious about
web.xml they are in the servlet container configuration files (server.xml on tomcat)No. But the default servlet (mapped in a web.xml at a common location in your servlet container) should preferably disable file listings (so that users don't see the contents of your web folders):
listings true