From fc399af136492c6c37cdddca6d44e5fe57f69680 Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Mon, 31 Oct 2011 23:23:37 +0000 Subject: [PATCH] SEC-1836: use GET as the default method with authorize tag. --- .../security/taglibs/authz/AbstractAuthorizeTag.java | 2 +- taglibs/src/main/resources/META-INF/security.tld | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java b/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java index e533edbdb0..9fcbae62a2 100644 --- a/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java +++ b/taglibs/src/main/java/org/springframework/security/taglibs/authz/AbstractAuthorizeTag.java @@ -61,7 +61,7 @@ import org.springframework.web.context.support.WebApplicationContextUtils; public abstract class AbstractAuthorizeTag { private String access; private String url; - private String method; + private String method = "GET"; private String ifAllGranted; private String ifAnyGranted; private String ifNotGranted; diff --git a/taglibs/src/main/resources/META-INF/security.tld b/taglibs/src/main/resources/META-INF/security.tld index ce94181785..cb3e33fc16 100644 --- a/taglibs/src/main/resources/META-INF/security.tld +++ b/taglibs/src/main/resources/META-INF/security.tld @@ -42,8 +42,9 @@ - Can optionally be used to narrow down the HTTP method (typically GET or POST) to which the URL - applies to. Only has any meaning when used in combination with the "url" attribute. + Can be used to narrow down the HTTP method (typically GET or POST) to which the URL + applies. Only has any meaning when used in combination with the "url" attribute. This method will + be used when looking up the security metadata for the URL. Defaults to GET. method false