Struts2 intercepts its vulnerability configuration method through filters