Luke Taylor 984604b026 SEC-1384: Removed check for empty authority list from DefaultWebInvocationPrivilegeEvaluator. ...

The class previously rejected access if the user had no authorities. It will now allow the AccessDecisionManager to make the decision.

2010-02-06 14:38:44 +00:00

..

main/java/org/springframework/security/web

SEC-1384: Removed check for empty authority list from DefaultWebInvocationPrivilegeEvaluator.

2010-02-06 14:38:44 +00:00

test

SEC-1377: Extended HTML escaping functionality to take account of control characters, whitespace and to handle Unicode supplementary characters (surrogate pairs).

2010-01-22 01:55:13 +00:00