You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Andy Wilkinson 02d7e2826c Don’t call ignoring.antMatchers([]) as empty array now maps to /** ... Previously, if security.ignored was set to none and the error controller was disabled, there would be no paths to ignore and we would call IgnoredRequestConfigurer.antMatchers with an empty array. While a bit pointless, this had no effect on Spring Security’s configuration. This behaviour has changed in the latest 4.0.3 snapshots [1]. An empty array passed to IgnoredRequestConfigurer.antMatchers now maps to /**. As Spring Boot configures its ignored paths with highest precedence this means that security is now disabled for every path. This commit updates both the management security and application security configuration to avoid calling antMatchers with an empty array, thereby ensuring that we don’t inadvertently ignore every path. Even if the change to Spring Security is reverted we can keep this change. The behaviour will remain the same and, arguably, it makes the intent of our configuration clearer. Closes gh-4345 [1] 8663ac4173		9 years ago
..
src	Don’t call ignoring.antMatchers([]) as empty array now maps to /**	9 years ago
pom.xml	Next Development Version	9 years ago