From 08a933f930f23d9fa459f858ec9587d97d437d33 Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Wed, 8 Dec 2010 13:56:08 +0000 Subject: [PATCH] SEC-1608: Ensure request wrapper is reset for empty filter chains. --- .../org/springframework/security/util/FilterChainProxy.java | 2 ++ 1 file changed, 2 insertions(+) diff --git a/core/src/main/java/org/springframework/security/util/FilterChainProxy.java b/core/src/main/java/org/springframework/security/util/FilterChainProxy.java index b38e67826d..28adf99e29 100644 --- a/core/src/main/java/org/springframework/security/util/FilterChainProxy.java +++ b/core/src/main/java/org/springframework/security/util/FilterChainProxy.java @@ -176,6 +176,8 @@ public class FilterChainProxy implements Filter, InitializingBean, ApplicationCo filters == null ? " has no matching filters" : " has an empty filter list"); } + fwRequest.reset(); + chain.doFilter(fwRequest, response); return;