From dada047e040448a3c016aca9ec3bdd184442fc3c Mon Sep 17 00:00:00 2001
From: Luke Taylor <luke.taylor@springsource.com>
Date: Wed, 21 Apr 2010 17:29:27 +0100
Subject: [PATCH] SEC-1456: Set rtexprvalue=true for "url" attribute in access
 tag to allow dynamic values (such as URL of current page).

---
 itest/web/src/main/webapp/WEB-INF/security.tld   | 2 +-
 taglibs/src/main/resources/META-INF/security.tld | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/itest/web/src/main/webapp/WEB-INF/security.tld b/itest/web/src/main/webapp/WEB-INF/security.tld
index ade20b534c..77dfe18287 100644
--- a/itest/web/src/main/webapp/WEB-INF/security.tld
+++ b/itest/web/src/main/webapp/WEB-INF/security.tld
@@ -32,7 +32,7 @@
         <attribute>
             <name>url</name>
             <required>false</required>
-            <rtexprvalue>false</rtexprvalue>
+            <rtexprvalue>true</rtexprvalue>
             <description>
                 A URL within the application. If the user has access to this URL (as determined by
                 the AccessDecisionManager), the tag body will be evaluated. If not, it will
diff --git a/taglibs/src/main/resources/META-INF/security.tld b/taglibs/src/main/resources/META-INF/security.tld
index ade20b534c..77dfe18287 100644
--- a/taglibs/src/main/resources/META-INF/security.tld
+++ b/taglibs/src/main/resources/META-INF/security.tld
@@ -32,7 +32,7 @@
         <attribute>
             <name>url</name>
             <required>false</required>
-            <rtexprvalue>false</rtexprvalue>
+            <rtexprvalue>true</rtexprvalue>
             <description>
                 A URL within the application. If the user has access to this URL (as determined by
                 the AccessDecisionManager), the tag body will be evaluated. If not, it will