If that isn't present in your web.xml, then look in the webapp's servlet source codes for an explicit call to Velocity and work backwards from the servlet's web.xml definition (or equivalent annotation). Also check to see if a JSP is running Velocity. Which I suspect is a messy thing to do, but that doesn't deter some people.
"privilege" comes from the Latin words for "private" and "law" (legal) and dates to feudal times. To "claim privilege" meant that you were above the laws that applied to the common people.
You had your fun. Now it's time to go to jail. Thanks for your help tiny ad.