Cwikius-Spring/spring-security
1
0
Fork 0
mirror of https://github.com/spring-projects/spring-security.git synced 2025-05-31 01:02:14 +00:00
Code Issues Packages Projects Releases Wiki Activity

SEC-2269: Fix headers documentation

Browse Source
This commit is contained in:
Rob Winch 2013-08-20 10:03:31 -05:00
parent eb95c500f5
commit f707101fdb
2 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/manual/src/docbook/appendix-namespace.xml
View File

@ -281,7 +281,7 @@
</link> header can be used by browser to do basic control.</listitem>
<listitem><literal>X-Content-Type-Options</literal> - Can be set using the
<link xlink:href="#nsa-content-type-options">content-type-options</link> element. The
<a href="http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx">X-Content-Type-Options</a>
<link xlink:href="http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx">X-Content-Type-Options</link>
header prevents Internet Explorer from MIME-sniffing a response away from the declared
content-type. This also applies to Google Chrome, when downloading extensions. </listitem>
</itemizedlist>

8
docs/manual/src/docbook/namespace-config.xml
View File

@ -629,16 +629,16 @@ List&lt;OpenIDAttribute> attributes = token.getAttributes();</programlisting>The
<para>A lot of different attacks to hijack content, sessions or connections are available and lately
browsers (optionally) can help to prevent those attacks. To enable these features we need to send some
additional headers to the client. Spring Security allows for easy configuration for several headers.
<progamlisting language="xml">
<programlisting language="xml">
<![CDATA[
<headers/>
]]>
</progamlisting>
</programlisting>
</para>
<para>Specifying the single headers element adds all the explicitly supported headers
with their default settings. If you only want select headers to be added,
you can add one or more of the child elements as shown below.
<progamlisting language="xml">
<programlisting language="xml">
<![CDATA[
<headers>
<!-- Add Cache-Control and Pragma headers -->
@ -655,7 +655,7 @@ List&lt;OpenIDAttribute> attributes = token.getAttributes();</programlisting>The
<xss-protection/>
</headers>
]]>
</progamlisting>
</programlisting>
</para>
<para>For additional information on how to customize the headers element refer to the <link xlink:href="nsa-headers">headers</link>
section of the Security Namespace appendix.</para>