There are only four standard URL patterns (and this applies to servlet
mappings and security constraints as well as filter mappings):
* Exact match (/foo)
* Path match (/foo/*)
* Extension match (*.foo)
* Default servlet (/) which is useful only for servlet mappings
There is no legal syntax to say "all but this set of paths".