Reported by https://github.com/4ra1n

In Eclipse Jetty, across various versions of `jetty-annotations`, and `jetty-eeN-annotations`, the Jakarta Spec authoritative url-pattern rules for mixed `@ServletSecurity` annotation, and `web.xml` defined `security-constraint` on the same `url-pattern`

Jetty proxy blacklist performs case-sensitive matching of case-insensitive DNS hostnames