CommandBox has an app.webxml setting in the server.json but it's not used. Instead, the web.xml is always set to be in the web-inf folder. The last time I reviewed the runwar code, there was a lot of logic that made the assumption the web.xml file would always be in the web-inf folder and didn't look in the location passed to it. Since runwar is in charge of parsing the web.xml file it should be able to look wherever it wants for the file.
We need to review all logic in Runwar that interacts with the web.xml path and see if we can change it to use the passed setting which looks like this: