This is an automated email from the ASF dual-hosted git repository. lprimak pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/shiro-site.git
commit b8547cd7073e5172d1e1275094aa0f1c92227c56 Author: lprimak <[email protected]> AuthorDate: Sat May 23 21:45:43 2026 -0500 bugfix: update spring matching strategy from markdown to asciidoc format --- src/site/content/security-reports.adoc | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/src/site/content/security-reports.adoc b/src/site/content/security-reports.adoc index d6070ae08..f36c57263 100644 --- a/src/site/content/security-reports.adoc +++ b/src/site/content/security-reports.adoc @@ -129,9 +129,10 @@ The authentication bypass occurs when Shiro and Spring Boot are using different **Mitigation:** Update to Apache Shiro 1.11.0, or set the following Spring Boot configuration value: -```properties +[source,properties] +---- spring.mvc.pathmatch.matching-strategy = ant_path_matcher -``` +---- **Credit:** Apache Shiro would like to thank v3ged0ge and Adamytd for reporting this issue.
