private boolean isStaticResource(final String fullPath, final String servletPath) {
        // Test for internal IdP sign in request.
        if (servletPath.startsWith(SIGN_IN_URL_PATH)) {
            return true;
        }

        int index = fullPath.lastIndexOf(".");
        if (index > 0) {
            String extension = fullPath.substring(index).toLowerCase();
            if (STATIC_RESOURCE_EXTENSIONS.contains(extension)) {
                return true;
            } else {
                // Handle stuff like .css.map
                index = fullPath.lastIndexOf(".", index - 1);
                if (index > 0) {
                    extension = fullPath.substring(index).toLowerCase();
                    return STATIC_RESOURCE_EXTENSIONS.contains(extension);
                }
            }
        }
        return false;
    }
Filter to avoid posts to the wrong place (e.g. the root of the app)
stroom-security/stroom-security-impl/src/main/java/stroom/security/impl/SecurityFilter.java