undertow-io/undertow — pull request #50 by darranl (2013-03-07 17:29:41+00:00)
Title: Treat trailing '/' as a wildcard match for security constraints.

This beings the behaviour in-line with JBoss Web which treats the security constraints with a trailing '/' as a wildcard as though it had been specified with '/*'.

Although the current matching does appear to match the spec definition this difference in behaviour is very likely to be problematic for web applications migrating to Undertow and if unchecked could lead to portions of web applications being unsecured where they were previously secured.