Test it yourself. Are you able to access a directory or file below the level of the webapps directory, simply by using a specially crafted request?
*With our testing could not access any files/directory outside webapps folder.* Thanks & Regards, Aditi
