diff --git a/web/src/main/java/org/springframework/security/web/util/AntUrlPathMatcher.java b/web/src/main/java/org/springframework/security/web/util/AntUrlPathMatcher.java index f0fbadf0b1..9c719f9a64 100644 --- a/web/src/main/java/org/springframework/security/web/util/AntUrlPathMatcher.java +++ b/web/src/main/java/org/springframework/security/web/util/AntUrlPathMatcher.java @@ -5,6 +5,12 @@ import org.springframework.util.AntPathMatcher; /** * Ant path strategy for URL matching. + *

+ * If the path consists of the pattern {@code /**} or {@code **}, it is treated as a universal + * match, which wil match any URL. + *

+ * For all other cases, Spring's {@code AntPathMatcher} is used to perform the check for a match. See the Spring + * documentation for this class for more information on the syntax details. * * @author Luke Taylor */ @@ -33,6 +39,9 @@ public class AntUrlPathMatcher implements UrlMatcher { } public boolean pathMatchesUrl(Object path, String url) { + if ("/**".equals(path) || "**".equals(path)) { + return true; + } return pathMatcher.match((String)path, url); }