Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-05-31 01:02:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

Polish Docs

Browse Source
This commit is contained in:
Rob Winch 2017-11-27 11:42:20 -06:00
parent 86824030f2
commit 690e22778a
2 changed files with 5 additions and 25 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
docs/manual/src/docs/asciidoc/_includes/migrating.adoc
View File

@ -1,17 +0,0 @@
[[m3to4]]
== Migrating from 3.x to 4.x
NOTE: Upgrading from Spring Security 4.0.x is passive.
These instructions are for users who are updating from Spring Security 3.2.x to 4.1.x.
As exploits against applications evolve, so must Spring Security.
As a major release version, the Spring Security team took the opportunity to make some non-passive changes which focus on:
* Ensuring Spring Security is more https://www.owasp.org/index.php/Establish_secure_defaults[secure by default]
* Minimizing https://www.owasp.org/index.php/Information_Leakage[Information Leakage]
* Removing deprecated APIs
For complete details on migrating from Spring Security 3 to Spring Security 4 refer to one of the guides below:
* http://docs.spring.io/spring-security/site/migrate/current/3-to-4/html5/migrate-3-to-4-xml.html[Migrating from Spring Security 3.x to 4.x (XML Configuration)]
* http://docs.spring.io/spring-security/site/migrate/current/3-to-4/html5/migrate-3-to-4-jc.html[Migrating from Spring Security 3.x to 4.x (Java Configuration)]

13
docs/manual/src/docs/asciidoc/index.adoc
View File

@ -4134,15 +4134,14 @@ CSRF protection is enabled by default with Java Configuration. If you would like
public class WebSecurityConfig extends public class WebSecurityConfig extends
WebSecurityConfigurerAdapter { WebSecurityConfigurerAdapter {
@Override @Override
protected void configure(HttpSecurity http) throws Exception { protected void configure(HttpSecurity http) throws Exception {
http http
.csrf().disable(); .csrf().disable();
} }
} }
---- ----
[[csrf-include-csrf-token]] [[csrf-include-csrf-token]]
==== Include the CSRF Token ==== Include the CSRF Token
@ -11405,5 +11404,3 @@ Provides Spring Security's JSP tag implementations.
include::{include-dir}/proxy-server.adoc[] include::{include-dir}/proxy-server.adoc[]
include::{include-dir}/faq.adoc[] include::{include-dir}/faq.adoc[]
include::{include-dir}/migrating.adoc[]