Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-06-01 09:42:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

SEC-2282: Polish CSRF Documentation

Browse Source
This commit is contained in:
Rob Winch 2013-09-27 17:14:21 -05:00
parent 8087cde628
commit df5e034fc3
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/manual/src/docbook/appendix-namespace.xml
View File

@ -263,7 +263,8 @@
<title><literal>&lt;headers&gt;</literal></title> <title><literal>&lt;headers&gt;</literal></title>
<para>This element allows for configuring additional (security) headers to be send with the response. <para>This element allows for configuring additional (security) headers to be send with the response.
It enables easy configuration for several headers and also allows for setting custom headers through It enables easy configuration for several headers and also allows for setting custom headers through
the <link linkend="nsa-header">header</link> element. the <link linkend="nsa-header">header</link> element. Additional information, can be found in the
<link linkend="headers">Security Headers</link> section of the reference.
<itemizedlist> <itemizedlist>
<listitem><literal>Cache-Control</literal>, <literal>Pragma</literal>, and <literal>Expires</literal> - Can be set using the <listitem><literal>Cache-Control</literal>, <literal>Pragma</literal>, and <literal>Expires</literal> - Can be set using the
<link linkend="nsa-cache-control">cache-control</link> element. This ensures that the <link linkend="nsa-cache-control">cache-control</link> element. This ensures that the
@ -523,7 +524,8 @@
<title><literal>&lt;csrf&gt;</literal></title> <title><literal>&lt;csrf&gt;</literal></title>
<para>This element will add <link xlink:href="http://en.wikipedia.org/wiki/Cross-site_request_forgery">Cross Site Request Forger (CSRF)</link> <para>This element will add <link xlink:href="http://en.wikipedia.org/wiki/Cross-site_request_forgery">Cross Site Request Forger (CSRF)</link>
protection to the application. It also updates the default RequestCache protection to the application. It also updates the default RequestCache
to only replay "GET" requests upon successful authentication.</para> to only replay "GET" requests upon successful authentication. Additional information can be found in the <link linkend="csrf">Cross Site
Request Forgery (CSRF)</link> section of the reference.</para>
<section xml:id="nsa-csrf-parents"> <section xml:id="nsa-csrf-parents">
<title>Parent Elements of <literal>&lt;csrf&gt;</literal></title> <title>Parent Elements of <literal>&lt;csrf&gt;</literal></title>
<itemizedlist> <itemizedlist>