SEC-2463: CSRF documentation includes EnableWebMvcSecurity

This commit is contained in:
Rob Winch 2014-01-29 09:28:51 -06:00
parent 3b05fd6fed
commit b5f5665ea6
1 changed files with 1 additions and 1 deletions

View File

@ -3140,7 +3140,7 @@ The last step is to ensure that you include the CSRF token in all PATCH, POST, P
[NOTE]
====
If you are using Spring MVC <form:form> tag or http://www.thymeleaf.org/whatsnew21.html#reqdata[Thymeleaf 2.1+], the `CsrfToken` is automatically included for you using the `CsrfRequestDataValueProcessor`.
If you are using Spring MVC <form:form> tag or http://www.thymeleaf.org/whatsnew21.html#reqdata[Thymeleaf 2.1+], the `CsrfToken` is automatically included for you if you replace `@EnableWebSecurity` with `@EnableWebMvcSecurity` using the `CsrfRequestDataValueProcessor`.
====
[[csrf-include-csrf-token-ajax]]