From 8fed90c26ca9dcda643fd7dee4ef2c475ad1fb79 Mon Sep 17 00:00:00 2001 From: Rob Winch Date: Fri, 27 Sep 2013 16:44:34 -0500 Subject: [PATCH] SEC-2282: Add links for AccessDeniedHandler in CSRF doc --- docs/manual/src/docbook/csrf.xml | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/docs/manual/src/docbook/csrf.xml b/docs/manual/src/docbook/csrf.xml index 2daeebf28f..b9e4d7691e 100644 --- a/docs/manual/src/docbook/csrf.xml +++ b/docs/manual/src/docbook/csrf.xml @@ -231,8 +231,10 @@ public class WebSecurityConfig extends A simple way to mitigate an active user experiencing a timeout is to have some JavaScript that lets the user know their session is about to expire. The user can click a button to continue and refresh the session. Alternatively, specifying a custom AccessDeniedHandler allows you to process the InvalidCsrfTokenException - anyway you like. For an example of how to customize the AccessDeniedHandler refer to the provided links for both xml and Java - configuration. + anyway you like. For an example of how to customize the AccessDeniedHandler refer to the provided links for both + xml and + Java + configuration.
Logging In