...
The flag is true
when Tomcat runs with enabled Java Security Manager.
You can also search the archives of the Tomcat users' mailing lists for previous discussions mentioning the RECYCLE_FACADES
flag.
2. Read about Java ImageIO issue.
Accessing response objects after their lifetime can lead to security issues in your application, such as sending responses to wrong clients, mixing up responses. If you can reproduce the issue and the above diagnostic does not show your own bug, but a bug in Apache Tomcat,
- if the problem manifests as a security issue, see how to report it.
...