[[exploits]]
= Protection Against Exploits

Spring Security provides protection against common exploits.
Whenever possible, the protection is enabled by default.
Below you will find high level description of the various exploits that Spring Security protects against.

include::csrf.adoc[leveloffset=+1]

include::headers.adoc[leveloffset=+1]

include::http.adoc[leveloffset=+1]
