Willie Wheeler(Migrated from SEC-989) said:
In section 22.214.171.124, “What does auto-config include”, the documentation states that
is part of the default configuration. Behaviorally this does not seem to be the case (I tested it), and the HttpSecurityBeanDefinitionParser.java source seems to confirm that no intercept URLs are included as part of the default configuration.
Luke Taylor said:
Thanks. This was probably left over from early design days.