SEC-451: Correctly handle an empty context path.
This commit is contained in:
parent
ee994839fa
commit
5b3c633790
|
@ -310,6 +310,10 @@ public abstract class AbstractProcessingFilter implements Filter, InitializingBe
|
|||
uri = uri.substring(0, pathParamIndex);
|
||||
}
|
||||
|
||||
if ("".equals(request.getContextPath())) {
|
||||
return uri.endsWith(filterProcessesUrl);
|
||||
}
|
||||
|
||||
return uri.endsWith(request.getContextPath() + filterProcessesUrl);
|
||||
}
|
||||
|
||||
|
|
|
@ -132,6 +132,10 @@ public class LogoutFilter implements Filter {
|
|||
uri = uri.substring(0, pathParamIndex);
|
||||
}
|
||||
|
||||
if ("".equals(request.getContextPath())) {
|
||||
return uri.endsWith(filterProcessesUrl);
|
||||
}
|
||||
|
||||
return uri.endsWith(request.getContextPath() + filterProcessesUrl);
|
||||
}
|
||||
|
||||
|
|
Loading…
Reference in New Issue