From 8170e47ff2fdb438f719a3de37e7a994f7ca847f Mon Sep 17 00:00:00 2001 From: Rob Winch Date: Tue, 21 Aug 2018 11:52:55 -0500 Subject: [PATCH] Fix OptimizeAntPathRequestMatcher Previously the logic for determining if the pathInfo should be appended was inverted. This correctly concatenates url + pathInfo if url is a non empty String. Fixes: gh-5473 --- .../security/web/util/matcher/AntPathRequestMatcher.java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java b/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java index d4aa02b3ab..286930984e 100644 --- a/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java +++ b/web/src/main/java/org/springframework/security/web/util/matcher/AntPathRequestMatcher.java @@ -175,7 +175,7 @@ public final class AntPathRequestMatcher String pathInfo = request.getPathInfo(); if (pathInfo != null) { - url = StringUtils.hasLength(url) ? pathInfo : url + pathInfo; + url = StringUtils.hasLength(url) ? url + pathInfo : pathInfo; } return url;