From 166f48e6abe2f2abaad7b879087fb9ea7d0e215e Mon Sep 17 00:00:00 2001 From: Rob Winch Date: Tue, 21 Aug 2018 11:52:55 -0500 Subject: [PATCH] Fix OptimizeAntPathRequestMatcher Previously the logic for determining if the pathInfo should be appended was inverted. This correctly concatenates url + pathInfo if url is a non empty String. Fixes: gh-5473 --- .../security/web/util/matcher/AntPathRequestMatcher.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java b/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java index d4aa02b3ab..286930984e 100644 --- a/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java +++ b/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java @@ -175,7 +175,7 @@ public final class AntPathRequestMatcher String pathInfo = request.getPathInfo(); if (pathInfo != null) { - url = StringUtils.hasLength(url) ? pathInfo : url + pathInfo; + url = StringUtils.hasLength(url) ? url + pathInfo : pathInfo; } return url;