Simeon Iliev (Migrated from SEC-1758) said:
Steps to reproduce:
1. Create a simple namespace configuration containing only one intercept-url definition:
<http auto-config="false" use-expressions="true" entry-point-ref="entryPoint">
<intercept-url pattern="/**" filters="none" />
<custom-filter position="FORM_LOGIN_FILTER" ref="myFilter" /> <!-- this might not be needed -->
2. Enable debug log
3. Access any application url
You should be redirected to the entryPoint URL. You should also be able to see the filter chain being executed in the debug log.
The filter chain should not be executed on any application URL.
Luke Taylor said:
As I said in the forum, you can't do this because the namespace only creates one filter chain, which applies to all requests. So adding filters="none" would be the equivalent of omitting the configurations altogether. The syntax isn't supported in 3.1 where you are free to define multiple filter chains.