[security-dev] https://issues.jboss.org/browse/SECURITY-777