See https://stackoverflow.com/questions/40150891/how-to-set-the-property-requestattributesenabled-for-accesslogvalve-in-apache-to Looks sensible to me even though we should draw a line somewhere. WDYT @wilkinsona ?