diff --git a/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java b/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java index a7dcbbdd98..30702f403d 100644 --- a/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java +++ b/config/src/main/java/org/springframework/security/config/http/DefaultFilterChainValidator.java @@ -126,11 +126,15 @@ private void checkAuthorizationFilters(List chains) { } if (authorizationFilter != null && filterSecurityInterceptor != null) { this.logger.warn( - "It is not recommended to use authorizeRequests or FilterSecurityInterceptor in the configuration. Please only use authorizeHttpRequests"); + "It is not recommended to use authorizeRequests or FilterSecurityInterceptor in the configuration. Please only use authorizeHttpRequests. " + + "Note: If using XML configuration, this warning can be ignored as XML elements internally use the deprecated mechanism. " + + "XML users should continue using standard configuration."); } if (filterSecurityInterceptor != null) { this.logger.warn( - "Usage of authorizeRequests and FilterSecurityInterceptor are deprecated. Please use authorizeHttpRequests in the configuration"); + "Usage of authorizeRequests and FilterSecurityInterceptor are deprecated. Please use authorizeHttpRequests in the configuration. " + + "Note: If using XML configuration, this warning can be ignored as XML elements internally use the deprecated mechanism. " + + "XML users should continue using standard configuration."); } authorizationFilter = null; filterSecurityInterceptor = null;