Merge branch 'fix_ai_bug' into pre

netflix-web/src/main/java/com/cyksj/security/ApiCacheProtectionFilter.java

@@ -32,6 +32,8 @@ public class ApiCacheProtectionFilter extends OncePerRequestFilter {
             uri = uri.substring(context.length());
         }
         String servletPath = request.getServletPath();
+        // Reject matrix-path ambiguity on public APIs too, without disabling their normal caching.
+        if (uri != null && MATRIX_PATH.matcher(uri).find()) return false;
         return !(uri != null && SENSITIVE_PATH.matcher(uri).find())
                 && !(servletPath != null && SENSITIVE_PATH.matcher(servletPath).find());
     }