diff --git a/core/src/main/java/org/springframework/security/taglibs/authz/AuthorizeTag.java b/core/src/main/java/org/springframework/security/taglibs/authz/AuthorizeTag.java index 297e7311fa..5643d54921 100644 --- a/core/src/main/java/org/springframework/security/taglibs/authz/AuthorizeTag.java +++ b/core/src/main/java/org/springframework/security/taglibs/authz/AuthorizeTag.java @@ -151,10 +151,7 @@ public class AuthorizeTag extends TagSupport { // Remove the role's whitespace characters without depending on JDK 1.4+ // Includes space, tab, new line, carriage return and form feed. String role = authority.trim(); // trim, don't use spaces, as per SEC-378 - role = StringUtils.replace(role, "\t", ""); - role = StringUtils.replace(role, "\r", ""); - role = StringUtils.replace(role, "\n", ""); - role = StringUtils.replace(role, "\f", ""); + role = StringUtils.deleteAny(role, "\t\n\r\f"); requiredAuthorities.add(new GrantedAuthorityImpl(role)); }