Cwikius-Spring
/
spring-security
mirror of https://github.com/spring-projects/spring-security.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Fixed typo in CSRF documentation. 

Fixes gh-4792
This commit is contained in:
Robert Roth 2018-04-04 13:03:43 +03:00 committed by Rob Winch
parent fed15f2b01
commit fddc28ba3b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
docs/manual/src/docs/asciidoc/_includes/web/csrf.adoc
View File

@ -271,7 +271,7 @@ name: $("meta[name='_csrf_header']").attr("content")
The configured client can be shared with any component of the application that needs to make a request to the CSRF protected resource.
One significant different between rest.js and jQuery is that only requests made with the configured client will contain the CSRF token, vs jQuery where __all__ requests will include the token.
One significant difference between rest.js and jQuery is that only requests made with the configured client will contain the CSRF token, vs jQuery where __all__ requests will include the token.
The ability to scope which requests receive the token helps guard against leaking the CSRF token to a third party.
Please refer to the https://github.com/cujojs/rest/tree/master/docs[rest.js reference documentation] for more information on rest.js.