1

I use *.jsf file types and any given address that ends with .xhtml is not parsed and it shows original code. I want to restrict access to .xhtml files with spring security, however it doesn't work. Spring security works fine for me, so I guess that there's problem with intercept-url:

<intercept-url pattern="*.xhtml" access="denyAll" />

Is my pattern ok and problem lies somewhere else?

ZZ 5
  • 1,744
  • 26
  • 41
  • 1
    This can be done in the `web.xml` file directly instead as shown [here](http://stackoverflow.com/q/5675271/1391249). – Tiny Jan 20 '14 at 10:15

0 Answers0