spring-boot

Spring Boot

Tree: fd89ced078

Madhura Bhave 3460c24a16 Ignore context path when calling privilege evaluator Previously, the error page security filter passed the request's URI to the privilege evaluator. This was incorrect in applications with a custom context path as the privilege evaluator must be passed a path that does not include the context path and the request URI includes the context path. This commit updates the filter to use UrlPathHelper's pathWithinApplication instead. The path within the application does not include the context path. In addition, pathWithinAppliation also correctly handles applications configured with a servlet mapping other than the default of /. Closes gh-29299 Co-Authored-By: Andy Wilkinson <wilkinsona@vmware.com>	4 years ago
..
src	Ignore context path when calling privilege evaluator	4 years ago
build.gradle	Remove use of Thymeleaf from smoke tests	4 years ago

Madhura Bhave 3460c24a16 Ignore context path when calling privilege evaluator

Previously, the error page security filter passed the request's URI
to the privilege evaluator. This was incorrect in applications with
a custom context path as the privilege evaluator must be passed a
path that does not include the context path and the request URI
includes the context path.

This commit updates the filter to use UrlPathHelper's
pathWithinApplication instead. The path within the application does
not include the context path. In addition, pathWithinAppliation
also correctly handles applications configured with a servlet
mapping other than the default of /.

Closes gh-29299

Co-Authored-By: Andy Wilkinson <wilkinsona@vmware.com>

4 years ago

src

Ignore context path when calling privilege evaluator

4 years ago

build.gradle

Remove use of Thymeleaf from smoke tests

4 years ago