You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
spring-boot/spring-boot-project
Madhura Bhave 3460c24a16 Ignore context path when calling privilege evaluator
Previously, the error page security filter passed the request's URI
to the privilege evaluator. This was incorrect in applications with
a custom context path as the privilege evaluator must be passed a
path that does not include the context path and the request URI
includes the context path.

This commit updates the filter to use UrlPathHelper's
pathWithinApplication instead. The path within the application does
not include the context path. In addition, pathWithinAppliation
also correctly handles applications configured with a servlet
mapping other than the default of /.

Closes gh-29299

Co-Authored-By: Andy Wilkinson <wilkinsona@vmware.com>
3 years ago
..
spring-boot Ignore context path when calling privilege evaluator 3 years ago
spring-boot-actuator Merge branch '2.5.x' into 2.6.x 3 years ago
spring-boot-actuator-autoconfigure Apply exclusion rules to child contributors 3 years ago
spring-boot-autoconfigure Merge branch '2.5.x' into 2.6.x 3 years ago
spring-boot-cli Merge branch '2.5.x' into 2.6.x 3 years ago
spring-boot-dependencies Upgrade to MariaDB 2.7.5 3 years ago
spring-boot-devtools Merge branch '2.5.x' 3 years ago
spring-boot-docs Merge branch '2.5.x' into 2.6.x 3 years ago
spring-boot-parent Merge branch '2.5.x' into 2.6.x 3 years ago
spring-boot-properties-migrator
spring-boot-starters Merge branch '2.5.x' 3 years ago
spring-boot-test Merge branch '2.5.x' into 2.6.x 3 years ago
spring-boot-test-autoconfigure Polish 3 years ago
spring-boot-tools Merge branch '2.5.x' into 2.6.x 3 years ago