diff --git a/config/src/main/resources/org/springframework/security/config/spring-security-3.1.rnc b/config/src/main/resources/org/springframework/security/config/spring-security-3.1.rnc index c4132c5f39..5cb3c9d4cf 100644 --- a/config/src/main/resources/org/springframework/security/config/spring-security-3.1.rnc +++ b/config/src/main/resources/org/springframework/security/config/spring-security-3.1.rnc @@ -299,7 +299,7 @@ http.attlist &= ## Deprecated in favour of the access-denied-handler element. attribute access-denied-page {xsd:token}? http.attlist &= - ## + ## Prevents the jsessionid parameter from being added to rendered URLs. attribute disable-url-rewriting {boolean}? access-denied-handler = diff --git a/config/src/main/resources/org/springframework/security/config/spring-security-3.1.xsd b/config/src/main/resources/org/springframework/security/config/spring-security-3.1.xsd index 0165a610cf..2637b440b3 100644 --- a/config/src/main/resources/org/springframework/security/config/spring-security-3.1.xsd +++ b/config/src/main/resources/org/springframework/security/config/spring-security-3.1.xsd @@ -777,7 +777,7 @@ - + Prevents the jsessionid parameter from being added to rendered URLs. diff --git a/docs/manual/src/docbook/appendix-namespace.xml b/docs/manual/src/docbook/appendix-namespace.xml index 9365eca0c2..e1b472b4b0 100644 --- a/docs/manual/src/docbook/appendix-namespace.xml +++ b/docs/manual/src/docbook/appendix-namespace.xml @@ -101,6 +101,13 @@ AuthenticationEntryPoint bean which will start the authentication process. +
+ <literal>security-context-repository-ref</literal> + + Allows injection of a custom SecurityContextRepository + into the SecurityContextPersistenceFilter. + +
<literal>access-decision-manager-ref</literal> Optional attribute specifying the ID of the @@ -143,6 +150,12 @@ described in the chapter on expression-based access-control.
+
+ <literal>disable-url-rewriting</literal> + Prevents session IDs from being appended to URLs in the application. + Clients must use cookies if this attribute is set to true. + +
<literal><access-denied-handler></literal>