Index: dtds/src/main/resources/glassfish/lib/dtds/sun-web-app_2_5-0.dtd
===================================================================
--- dtds/src/main/resources/glassfish/lib/dtds/sun-web-app_2_5-0.dtd	(revision 24578)
+++ dtds/src/main/resources/glassfish/lib/dtds/sun-web-app_2_5-0.dtd	(working copy)
@@ -16,7 +16,7 @@
                        ejb-ref*, resource-ref*, resource-env-ref*,  service-ref*,
                        message-destination-ref*, cache?, class-loader?,
                        jsp-config?, locale-charset-info?, parameter-encoding?,
-                       property*, message-destination*, webservice-description*)>
+                       property*, valve*, message-destination*, webservice-description*)>
 <!ATTLIST sun-web-app error-url CDATA ""
                       httpservlet-security-provider CDATA #IMPLIED>
 
@@ -320,6 +320,9 @@
 -->
 <!ELEMENT value (#PCDATA)>
 
+<!ELEMENT valve (description?, property*)>
+<!ATTLIST property classname  CDATA  #REQUIRED
+                   name       CDATA  #REQUIRED>
 

-> WOLFRAM:

1. I think "property" in ATTLIST should be changed to "valve"
2. In order to be consistent with existing sun-web.xml elements
   (e.g., cache-helper, principal-name), I would change "classname" to
   "class-name", and also revert the order of the two valve attributes,
   as follows:

   <!ATTLIST valve name CDATA #REQUIRED
                   class-name CDATA #REQUIRED>