Conclusions found online:
According to the servlet2.3 specification, filter execution is performed in the order of filter-mapping configured in web.xml
Therefore, the above configuration will cause the url request of *.do to be encountered, and the filter processing of SecurityFilter will be performed first. At this time, no encoding processing is performed, and it is already garbled. When the following filter processing is performed, it is already garbled, and it is useless to do encoding processing. .