From 0bc08f8a23a9a95b8b34006105e3b1976068ac46 Mon Sep 17 00:00:00 2001
From: Rob Winch <rwinch@vmware.com>
Date: Thu, 1 Aug 2013 09:47:57 -0500
Subject: [PATCH] SEC-2230: Update contacts sample to use <headers> with no
 child elements

---
 .../src/main/resources/applicationContext-security.xml     | 7 +------
 1 file changed, 1 insertion(+), 6 deletions(-)

diff --git a/samples/contacts/src/main/resources/applicationContext-security.xml b/samples/contacts/src/main/resources/applicationContext-security.xml
index 2a02821eb1..d6ae0f13a3 100644
--- a/samples/contacts/src/main/resources/applicationContext-security.xml
+++ b/samples/contacts/src/main/resources/applicationContext-security.xml
@@ -30,12 +30,7 @@
         <http-basic/>
         <logout logout-success-url="/index.jsp"/>
         <remember-me />
-        <headers>
-            <xss-protection />
-            <frame-options policy="DENY" />
-            <content-type-options/>
-            <header name="foo" value="bar"/>
-        </headers>
+        <headers/>
         <custom-filter ref="switchUserProcessingFilter" position="SWITCH_USER_FILTER"/>
     </http>