    public void init( final ServletConfig config ) throws ServletException {
        final String _includes = config.getInitParameter( "includes-path" );
        if ( _includes != null && !_includes.trim().isEmpty() ) {
            includes.addAll( Arrays.asList( _includes.split( "," ) ) );
        }
        final String _excludes = config.getInitParameter( "excludes-path" );
        if ( _excludes != null && !_excludes.trim().isEmpty() ) {
            excludes.addAll( Arrays.asList( _excludes.split( "," ) ) );
        }
    }
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.