Fixed: post-auth Remote Code Execution Vulnerability
In previous commit, in CacheFilter::doFilter, I checked "xmlrpc"  when it was
actually "/control/xmlrpc"
@@ -57,7 +57,7 @@ public class CacheFilter implements Filter {
String uriWithContext = ((HttpServletRequest) request).getRequestURI();
String uri = uriWithContext.substring(context.length());
- if ("xmlrpc".equals(uri.toLowerCase())) {
+ if ("/control/xmlrpc".equals(uri.toLowerCase())) {
// Read request.getReader() as many time you need
request = new RequestWrapper((HttpServletRequest) request);
String body = request.getReader().lines().collect(Collectors.joining());
