Ophir Radnitz (Migrated from SEC-1903) said:
org.springframework.security.web.firewal.FirewalledResponse holds a regex Pattern as an instance member. This means it is instantiated and recompiled for every FirewalledResponse instance. These are created quite rapidly in the FilterChainProxy filter invocation. The pattern should probably become a static member.
Rob Winch said:
Assigning to Luke since he has already pushed a fix out