From feeca9a52d4907b43b01c8fb4130ad35c59e7ee5 Mon Sep 17 00:00:00 2001
From: Cristhian Castaneda <ccastanedarivera@gmail.com>
Date: Tue, 14 Dec 2021 14:21:48 -0600
Subject: [PATCH] fix(vulnerability): avoid expose gate endpoints

---
 .../groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy  | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy
index e27c9e78da..12a697e123 100644
--- a/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy
+++ b/gate-core/src/main/groovy/com/netflix/spinnaker/gate/config/AuthConfig.groovy
@@ -81,7 +81,7 @@ class AuthConfig {
     http
       .requestMatcher(requestMatcherProvider.requestMatcher())
       .authorizeRequests()
-        .antMatchers('/**/favicon.ico').permitAll()
+        .antMatchers('/favicon.ico').permitAll()
         .antMatchers(HttpMethod.OPTIONS, "/**").permitAll()
         .antMatchers(PermissionRevokingLogoutSuccessHandler.LOGGED_OUT_URL).permitAll()
         .antMatchers('/auth/user').permitAll()