There's no support for reversing a regex, so I don't know of any clean way to do anything like this. The only note is that requireSession="false" is redundant, it defaults that way. Setting it to false is only useful if the inherited value were true. Usually when rules are awkward the fix is to reorganize the content to make more sense. -- Scott