Index: branches/features/grailsUpgrade/grails-app/conf/Config.groovy
===================================================================
--- branches/features/grailsUpgrade/grails-app/conf/Config.groovy	(revision 881)
+++ branches/features/grailsUpgrade/grails-app/conf/Config.groovy	(revision 888)
@@ -10,5 +10,10 @@
 //    grails.config.locations << "file:" + System.properties["${appName}.config.location"]
 // }
-grails.mime.file.extensions = true // enables the parsing of file extensions from URLs into the request format
+
+// Set false due to acegi security issue.
+// See: http://jira.grails.org/browse/GPACEGI-41
+// See: http://www.gnumims.org/trac/ticket/98
+grails.mime.file.extensions = false // enables the parsing of file extensions from URLs into the request format
+
 grails.mime.types = [ html: ['text/html','application/xhtml+xml'],
                       xml: ['text/xml', 'application/xml'],