Spring 5.0.3 RequestRejectedException: The request was rejected because the URL was not normalized

Question

Not sure if this is a bug with Spring 5.0.3 or a new feature to fix things on my end.

After the upgrade, I am getting this error. Interestingly this error is only on

Answer 1

In my case, upgraded from spring-securiy-web 3.1.3 to 4.2.12, the defaultHttpFirewall was changed from DefaultHttpFirewall to StrictHttpFirewall by default. So just define it in XML configuration like below:

set HTTPFirewall as DefaultHttpFirewall