https://www.javacodegeeks.com/2014/02/apache-tomcat-and-denial-of-service-vulnerability.html