diff --git a/webgoat-container/src/main/webapp/WEB-INF/web.xml b/webgoat-container/src/main/webapp/WEB-INF/web.xml
index e566c64bf..6431ce4f7 100644
--- a/webgoat-container/src/main/webapp/WEB-INF/web.xml
+++ b/webgoat-container/src/main/webapp/WEB-INF/web.xml
@@ -126,6 +126,10 @@
             <param-name>CookieDebug</param-name>
             <param-value>true</param-value>
         </init-param>
+        <init-param>
+            <param-name>DefuseOSCommands</param-name>
+            <param-value>false</param-value>
+        </init-param>
         <init-param>
             <param-name>Enterprise</param-name>
             <param-value>true</param-value>