FilterSecurityInterceptor once per request set attr

Only set the attribute if once per request is true
2018-02-04 09:29:05 +08:00 · 2018-02-04 09:29:05 +08:00 · 40a1281c66
parent ce5fb51b20
commit 40a1281c66
1 changed files with 1 additions and 1 deletions
--- a/web/src/main/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptor.java
+++ b/web/src/main/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptor.java
@ -117,7 +117,7 @@ public class FilterSecurityInterceptor extends AbstractSecurityInterceptor imple
 		}
 		else {
 			// first time this request being called, so perform security checking
-			if (fi.getRequest() != null) {
+			if (fi.getRequest() != null && observeOncePerRequest) {
 				fi.getRequest().setAttribute(FILTER_APPLIED, Boolean.TRUE);
 			}