From e6e168f127d379fff9bdab603bc85cdbcc186793 Mon Sep 17 00:00:00 2001
From: Luke Taylor <luke.taylor@springsource.com>
Date: Wed, 21 Apr 2010 17:29:27 +0100
Subject: [PATCH] SEC-1456: Set rtexprvalue=true for "url" attribute in access
 tag to allow dynamic values (such as URL of current page).

---
 taglibs/src/main/resources/META-INF/security.tld | 3 +--
 1 file changed, 1 insertion(+), 2 deletions(-)

diff --git a/taglibs/src/main/resources/META-INF/security.tld b/taglibs/src/main/resources/META-INF/security.tld
index 78ce820d1e..05376cefb7 100644
--- a/taglibs/src/main/resources/META-INF/security.tld
+++ b/taglibs/src/main/resources/META-INF/security.tld
@@ -9,7 +9,6 @@
     <uri>http://www.springframework.org/security/tags</uri>
     <description>
         Spring Security Authorization Tag Library
-        $Id$
     </description>
 
     <tag>
@@ -33,7 +32,7 @@
         <attribute>
             <name>url</name>
             <required>false</required>
-            <rtexprvalue>false</rtexprvalue>
+            <rtexprvalue>true</rtexprvalue>
             <description>
                 A URL within the application. If the user has access to this URL (as determined by
                 the AccessDecisionManager), the tag body will be evaluated. If not, it will