Spring Security
  1. Spring Security
  2. SEC-1103

ExceptionTranslationFilter does not handle JspException

    Details

    • Type: Improvement Improvement
    • Status: Closed
    • Priority: Minor Minor
    • Resolution: Won't Fix
    • Affects Version/s: 2.0.4
    • Fix Version/s: 3.0.0 M1
    • Component/s: None
    • Labels:
      None

      Description

      The ExceptionTranslationFilter currently does not handle JspException, this means that when a security exception occurs it is not trapped by the filter, and the security handling is never correctly fired.

        Activity

        Hide
        Greg Bowyer added a comment -

        Attached is a patch that solves the above issue

        Show
        Greg Bowyer added a comment - Attached is a patch that solves the above issue
        Hide
        Luke Taylor added a comment -

        This is essentially a view-specific issue and not a bug since the ThrowableAnalyzer is customizable specifically to allow you to handle this kind of behaviour from the view layer. We'd prefer to restrict the web module dependencies to the servlet API.

        Show
        Luke Taylor added a comment - This is essentially a view-specific issue and not a bug since the ThrowableAnalyzer is customizable specifically to allow you to handle this kind of behaviour from the view layer. We'd prefer to restrict the web module dependencies to the servlet API.

          People

          • Assignee:
            Luke Taylor
            Reporter:
            Greg Bowyer
          • Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved: