Victor Polischuk (Migrated from SEC-1880) said:
In org.springframework.security.config.http.LogoutBeanDefinitionParser there is an mistake in exception message composing.
Instead of: "Use " + ATT_LOGOUT_URL + " or " + ATT_LOGOUT_HANDLER + ", but not both"
Should be: "Use " + ATT_LOGOUT_SUCCESS_URL + " or " + ATT_LOGOUT_HANDLER + ", but not both"
Rob Winch said:
Thanks for your bug submission. This is now fixed in master and the 3.0.x branch