From 93c245b8ec16849994f2cd4bb4a4b0bb73086ed1 Mon Sep 17 00:00:00 2001
From: jbonofre <jbonofre@apache.org>
Date: Thu, 21 May 2020 10:40:52 +0200
Subject: [PATCH] [AMQ-7465] Protect any webconsole URL by default

---
 assembly/src/release/conf/jetty.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/assembly/src/release/conf/jetty.xml b/assembly/src/release/conf/jetty.xml
index 0e44442f17..61648a47d7 100644
--- a/assembly/src/release/conf/jetty.xml
+++ b/assembly/src/release/conf/jetty.xml
@@ -39,7 +39,7 @@
     </bean>
     <bean id="securityConstraintMapping" class="org.eclipse.jetty.security.ConstraintMapping">
         <property name="constraint" ref="securityConstraint" />
-        <property name="pathSpec" value="/api/*,/admin/*,*.jsp" />
+        <property name="pathSpec" value="/*,/api/*,/admin/*,*.jsp" />
     </bean>
     <bean id="adminSecurityConstraintMapping" class="org.eclipse.jetty.security.ConstraintMapping">
         <property name="constraint" ref="adminSecurityConstraint" />