Spring-security-7.1.xsd schema validates request-matcher incorrectly
Maintainers usually reply within 1 day
@suryakant-source is already working on this.
Since Oct 23, 2026.
- #19982 by @suryakant-source — open
Assessment
- Difficulty
- 2/5
- Estimated time
- 1-3 hours
- Newbie friendliness
- 66/100
Research direction
The issue names spring-security-7.1.xsd and spring-security-7.2.xsd, and points to the earlier fix in #18641 and the MatcherType values. Read that fix and compare the schema files; confirm they accept path, regex and ciRegex instead of mvc, ant, regex and ciRegex. Done when both schemas validate the intended matcher values.
Written by the indexing model from the issue text.
Description
The bug descibed in #18641 was only fixed for Spring-security-7.0.xsd schema file but not in spring-security-7.1.xsd and spring-security-7.2.xsd because they were branched before.
"As of Spring Security 7 the AntPathRequestMatcher and the MvcRequestMatcher have been consolidated into the PathPatternRequestMatcher.
Therefore, all occurrences of request-matcher="ant" or request-matcher="mvc" should be replaced by request-matcher="path", at least if I understand the changes correctly.
However, the spring-security.xsd does not reflect the changes to the MatcherType correctly.
It still validates against the previous value set of mvc, ant, regex and ciRegex
It should instead validate agains the set path, regex and ciRegex"
- Dominant language
- Java
- Stars
- 9.7k
- Forks
- 6.4k
- Avg merge
- 1d 18h
- Merged PRs (30d)
- 37
Getting set up
- No Dockerfile or Docker Compose file
- Has a pull request template
- Read the contributing guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from spring-projects/spring-security
-
OidcUserInfo builder shoud accept Instant for the updateAt methodPossibly taken @KaranCodez claimed this today. Openstatus: waiting-for-triage type: bug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
spring-projects/spring-security#20013 ·
Maintainers usually reply within 1 day
-
status: waiting-for-triage
Difficulty 2/5 1-3 hours Newbie friendliness 62/100
spring-projects/spring-security#19996 ·
Maintainers usually reply within 1 day
-
status: waiting-for-triage type: enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
spring-projects/spring-security#19995 ·
Maintainers usually reply within 1 day
-
status: waiting-for-triage
Difficulty 2/5 1-3 hours Newbie friendliness 78/100
spring-projects/spring-security#19984 ·
Maintainers usually reply within 1 day
-
status: waiting-for-triage
Difficulty 2/5 1-3 hours Newbie friendliness 77/100
spring-projects/spring-security#19963 ·
Maintainers usually reply within 1 day
All issues in spring-projects/spring-security
Similar issues
-
Difficulty 2/5 1-3 hours Newbie friendliness 66/100
a2aproject/a2a-java#1275 ·
Maintainers usually reply within 1 day
-
module/ftp Type/Bug
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
ballerina-platform/ballerina-library#9476 ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 65/100
HMCL-dev/HMCL#7175 · 1 reaction ·
Maintainers usually reply within 1 day
-
enhancement
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
anwilli5/coin-collection-android-US#515 ·
Maintainers usually reply within 1 day
-
Difficulty 2/5 1-3 hours Newbie friendliness 72/100
FasterXML/jackson-databind#6398 ·
Maintainers usually reply within 1 day