diff --git a/web/src/main/java/org/springframework/security/web/session/RequestedUrlRedirectInvalidSessionStrategy.java b/web/src/main/java/org/springframework/security/web/session/RequestedUrlRedirectInvalidSessionStrategy.java index 65c6f45c56..9d023701ff 100644 --- a/web/src/main/java/org/springframework/security/web/session/RequestedUrlRedirectInvalidSessionStrategy.java +++ b/web/src/main/java/org/springframework/security/web/session/RequestedUrlRedirectInvalidSessionStrategy.java @@ -46,7 +46,9 @@ public final class RequestedUrlRedirectInvalidSessionStrategy implements Invalid public void onInvalidSessionDetected(HttpServletRequest request, HttpServletResponse response) throws IOException { String destinationUrl = ServletUriComponentsBuilder.fromRequest(request).host(null).scheme(null).port(null) .toUriString(); - this.logger.debug("Starting new session (if required) and redirecting to '" + destinationUrl + "'"); + if (this.logger.isDebugEnabled()) { + this.logger.debug("Starting new session (if required) and redirecting to '" + destinationUrl + "'"); + } if (this.createNewSession) { request.getSession(); }