According to the spec (Chapter 11.2): <spec> A string beginning with a â/â character and ending with a â/*â postfix is used for path mapping.
A string beginning with a â*.â prefix is used as an extension mapping. A string containing only the â/â character indicates the "default" servlet of the application. In this case the servlet path is the request URI minus the context path and the path info is null. All other strings are used for exact matches only. </spec> So /pages/*.jsp is not a valid pattern mapping. It's just *.jsp or /pages/* > -----Original Message----- > From: Boulay Arnaud [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 11, 2004 10:26 AM > To: [EMAIL PROTECTED] > Subject: url-pattern pb in security constraints > > > <url-pattern>/pages/secret1/*.jsp</url-pattern> > <url-pattern>/pages/*.jsp</url-pattern> >
