From 40a1281c66071bfe12a291f5ab0c7e4e26df414c Mon Sep 17 00:00:00 2001
From: json20080301 <15874857042@163.com>
Date: Sun, 4 Feb 2018 09:29:05 +0800
Subject: [PATCH] FilterSecurityInterceptor once per request set attr

Only set the attribute if once per request is true
---
 .../web/access/intercept/FilterSecurityInterceptor.java         | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/main/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptor.java b/web/src/main/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptor.java
index 76d4c3f384..e21d62507b 100644
--- a/web/src/main/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptor.java
+++ b/web/src/main/java/org/springframework/security/web/access/intercept/FilterSecurityInterceptor.java
@@ -117,7 +117,7 @@ public class FilterSecurityInterceptor extends AbstractSecurityInterceptor imple
 		}
 		else {
 			// first time this request being called, so perform security checking
-			if (fi.getRequest() != null) {
+			if (fi.getRequest() != null && observeOncePerRequest) {
 				fi.getRequest().setAttribute(FILTER_APPLIED, Boolean.TRUE);
 			}