spring-security
spring-security copied to clipboard
`HeaderWriterFilter` appears to be violating Servlet spec
Servlet spec states that include dispatch:
... cannot set headers or call any method that affects the headers of the response... Any attempt to set the headers must be ignored...
HeaderWriterFilter appears to be at odds with this as it invokes HeaderWriterResponse#onResponseCommitted in HeaderWriterRequestDispatcher#include, which in turn calls HeaderWriterResponse#writeHeaders.