@ServletSecurity parameters are ignored.
vulners.com/securityvulns/securityvulns:doc:25932
vulners.com/securityvulns/securityvulns:doc:26374