i'm solving issue of webform application security issue.
security team is said default path="/" is vulnerable