Logfiles:

In addition to the Tomcat logfiles, the Webdisk writes its own logfiles using Log4j.

The location of the Log4j configuration file can be set in web.xml with the property "log4jconf". The default setting points to the file "log4j.properties" in the WEB-INF directory. The logfile is specified with "log4j.appender.Daily.file". The default setting is log/log4j.log, which will be <tomcat-home>/bin/log/log4j.log.

All kinds of user events are logged: e.g. login, logout, download, upload, etc.

Your task: Make sure that log4j.log is kept secret and remove older versions if necessary.

Temporary files:

Uploaded files need to be temporary saved. Therefore you can define a temporary directory in web.xml with the property "uploadpath". The uploadpath is also used by the functions "Download as Zip" and "make Zip" if the zipDirectDownload property is set to "0" in "web.xml".
Sometimes it can happen that these temporary files are not automatically removed.

Your task: Remove the contents of your uploadpath every day.