SEC-2230: Update contacts sample to use <headers> with no child elements

2013-08-01 09:47:57 -05:00 · 2013-08-01 09:47:57 -05:00 · 0bc08f8a23
parent 283c906215
commit 0bc08f8a23
1 changed files with 1 additions and 6 deletions
--- a/samples/contacts/src/main/resources/applicationContext-security.xml
+++ b/samples/contacts/src/main/resources/applicationContext-security.xml
@ -30,12 +30,7 @@
        <http-basic/>
        <logout logout-success-url="/index.jsp"/>
        <remember-me />
-        <headers>
-            <xss-protection />
-            <frame-options policy="DENY" />
-            <content-type-options/>
-            <header name="foo" value="bar"/>
-        </headers>
+        <headers/>
        <custom-filter ref="switchUserProcessingFilter" position="SWITCH_USER_FILTER"/>
    </http>