Spring Security
- @PreFilter/@PreAuthorize/@PostFilter self-invocation method calls
Using @PreFilter/@PostFilter/@PreAuthorize: In proxy mode (which is the default), only external method calls coming in through the proxy are intercepted.
- Debug mode is activated in the Spring Security configuration
Reports activated <debug> that may expose sensitive information.
- Incorrect Spring Security XML-based application context
Reports issues with the Spring Security XML-based context:.
- Incorrect configuration of Spring beans referenced in the Spring Security annotation
Reports unresolved Spring beans referenced in Spring Security annotations.
Last modified: 11 September 2024