Error on filter chain when processing unauthorized/invalid requests

[matteo-s]

Due to a bug in spring ErrorPageSecurityFilter which doesn't correctly handle multiple filter chains and DummyRequests, requests which generate an error in any filter chain but default will end up intercepted by the default error handler, which will process a dummyrequest without details. All custom rules accessing request details (port, remote address, scheme etc) will trigger a nullpointerexception because of missing request details.

See
spring-projects/spring-security#10664
spring-projects/spring-security#10554
spring-projects/spring-security#11055 (comment)