From d931495c8aea6809fa77acbb5160cbda6dd6d704 Mon Sep 17 00:00:00 2001
From: Luke Taylor <luke.taylor@springsource.com>
Date: Fri, 22 Jan 2010 23:05:12 +0000
Subject: [PATCH] SEC-1380: Trim whitespace from config attributes when
 building a list in SecurityConfig.

---
 .../config/http/HttpSecurityBeanDefinitionParserTests.java      | 2 +-
 .../org/springframework/security/access/SecurityConfig.java     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/config/src/test/java/org/springframework/security/config/http/HttpSecurityBeanDefinitionParserTests.java b/config/src/test/java/org/springframework/security/config/http/HttpSecurityBeanDefinitionParserTests.java
index fbb65be712..83e4fd08b1 100644
--- a/config/src/test/java/org/springframework/security/config/http/HttpSecurityBeanDefinitionParserTests.java
+++ b/config/src/test/java/org/springframework/security/config/http/HttpSecurityBeanDefinitionParserTests.java
@@ -316,7 +316,7 @@ public class HttpSecurityBeanDefinitionParserTests {
     public void lowerCaseComparisonIsRespectedBySecurityFilterInvocationDefinitionSource() throws Exception {
         setContext(
                 "    <http auto-config='true' path-type='ant' lowercase-comparisons='false'>" +
-                "        <intercept-url pattern='/Secure*' access='ROLE_A,ROLE_B' />" +
+                "        <intercept-url pattern='/Secure*' access='ROLE_A, ROLE_B' />" +
                 "        <intercept-url pattern='/**' access='ROLE_C' />" +
                 "    </http>" + AUTH_PROVIDER_XML);
 
diff --git a/core/src/main/java/org/springframework/security/access/SecurityConfig.java b/core/src/main/java/org/springframework/security/access/SecurityConfig.java
index 7e7430ef4b..2254436f5a 100644
--- a/core/src/main/java/org/springframework/security/access/SecurityConfig.java
+++ b/core/src/main/java/org/springframework/security/access/SecurityConfig.java
@@ -75,7 +75,7 @@ public class SecurityConfig implements ConfigAttribute {
         List<ConfigAttribute> attributes = new ArrayList<ConfigAttribute>(attributeNames.length);
 
         for (String attribute : attributeNames) {
-            attributes.add(new SecurityConfig(attribute));
+            attributes.add(new SecurityConfig(attribute.trim()));
         }
 
         return attributes;