Josh Cummings
1af665d6c8
Merge branch '6.5.x'
2025-07-31 10:21:50 -06:00
Josh Cummings
c966139338
Merge branch '6.4.x' into 6.5.x
2025-07-31 10:21:36 -06:00
Josh Cummings
a411fb7b8d
Merge remote-tracking branch 'origin/6.3.x' into 6.4.x
2025-07-31 10:21:26 -06:00
Michał Sobkiewicz
c963f4250e
Update Angular documentation links in csrf.adoc
...
Replaced `angular.io` links with their corresponding `angular.dev` URLs.
This change ensures that users referencing CSRF documentation are
directed to the most current Angular resources.
Signed-off-by: Michał Sobkiewicz <perceptron8@users.noreply.github.com>
2025-07-31 10:21:06 -06:00
Josh Cummings
b71a66bdaa
Use PathPatternRequestMatcher in docs
...
Issue gh-16886
Issue gh-16887
2025-07-03 13:37:50 -06:00
Josh Cummings
c43afbf5e1
Format Lambda Expressions
...
This commit updats lambda expressions so that
their variable is surrounded in parentheses.
Issue gh-13067
2025-06-20 10:41:29 -06:00
Felix Hagemans
1a4de49977
Create CsrfCustomizer for SPA configuration
...
Closes gh-14149
Signed-off-by: Felix Hagemans <felixhagemans@gmail.com>
2025-05-27 11:44:33 -06:00
Josh Cummings
be23268c37
Add redirectToHttps DSL Configurer
...
Closes gh-16679
2025-02-28 09:38:07 -07:00
Steve Riesenberg
14be74051e
Merge branch '6.3.x'
...
Closes gh-16176
2024-11-26 12:12:49 -06:00
Harpreet Singh
68d91916e2
Polish Dark Mode for CSRF and Method Security diagrams
...
Closes gh-16151
2024-11-26 01:53:56 +05:30
Josh Cummings
ef35c4a64a
Merge branch '6.3.x'
2024-07-29 15:10:50 -06:00
Josh Cummings
e51507e32d
Polish Inline Code Formatting
2024-07-29 14:08:01 -07:00
Junhyunny
bfee6927c2
Correct Explanation for HttpSessionCsrfTokenRepository
2024-07-29 14:08:01 -07:00
Rob Winch
5bd4db1a13
Use javadoc macro
...
Closes gh-15386
2024-07-09 22:35:01 -05:00
Steve Riesenberg
ee9f5a2d5e
Improve CSRF example for single-page apps
...
Closes gh-15105
2024-05-29 11:54:08 -05:00
Steve Riesenberg
6f8cc920cd
Merge branch '6.1.x' into 6.2.x
...
Closes gh-14805
2024-03-26 12:18:42 -05:00
Steve Riesenberg
80845d0c9a
Fix NPE in Kotlin docs example
...
Closes gh-14634
2024-03-26 12:18:06 -05:00
Steve Riesenberg
ba575e8564
Add tests for invalid/missing token
...
Issue gh-14634
2024-03-26 12:18:06 -05:00
Josh Cummings
22000b42e9
Merge remote-tracking branch 'origin/6.1.x'
2023-11-07 16:34:15 -07:00
Josh Cummings
42225371d7
Merge branch '6.0.x' into 6.1.x
...
Closes gh-14114
2023-11-07 16:33:45 -07:00
Josh Cummings
18c5f4354e
Merge branch '5.8.x' into 6.0.x
...
Closes gh-14113
2023-11-07 16:31:46 -07:00
Josh Cummings
b919ece045
Change Idempotent to Read-Only
...
Closes gh-13644
2023-11-07 16:25:28 -07:00
Steve Riesenberg
447f40949c
Revert unnecessary merges on 6.1.x
...
This commit removes unnecessary main-branch merges starting from
9f8db22b774fe78fef3598c07e184c371892c1c7 and adds the following
needed commit(s) that were made afterward:
- 4d6ff49b9d663d0f25454f3704a45c83b35da689
- ed6ff670d102736eea0ac360921c9015151ac630
- c823b007942a04a27d02c0a28bc2ad85e8790084
- 44fad21363bef1b06422be28c9bbfadde5e44804
2023-10-31 15:22:15 -05:00
Steve Riesenberg
9db33f33c7
Revert unnecessary merges on 6.0.x
...
This commit removes unnecessary main-branch merges starting from
8750608b5bca45525c99d0a41a20ed02de93d8c7 and adds the following
needed commit(s) that were made afterward:
- 5dce82c48bc0b174838501c5a111b2de70822914
2023-10-31 15:11:45 -05:00
Deniz Husaj
91a8ed1ba7
Update firewall.adoc
2023-09-07 13:58:39 -05:00
Marcus Da Coregio
2ef9dc916f
Fix unresolved xref
...
Issue gh-13552
2023-07-19 14:31:37 -03:00
Rob Winch
8407c9ebee
Merge branch '6.0.x'
...
Closes gh-13407
2023-06-18 21:41:16 -05:00
Rob Winch
f66a5bab99
Merge branch '5.8.x' into 6.0.x
...
Closes gh-13406
2023-06-18 21:33:58 -05:00
Rob Winch
7da99acca7
Merge branch '5.7.x' into 5.8.x
...
Closes gh-13405
2023-06-18 21:32:35 -05:00
Rob Winch
0cf95dbf61
Merge branch '5.6.x' into 5.7.x
...
Closes gh-13404
2023-06-18 21:31:35 -05:00
Rob Winch
39c43159f4
Convert to Asciidoctor Tabs
...
Closes gh-13403
2023-06-18 21:30:41 -05:00
Steve Riesenberg
f54c344989
Move imports to code section
...
Issue gh-13089
2023-05-15 09:22:57 -05:00
Steve Riesenberg
e7fa34008b
Revisit CSRF page
...
Closes gh-13089
2023-05-12 12:29:32 -05:00
Steve Riesenberg
c4f68d83bf
Document default CsrfTokenRequestHandler in 6.0
...
Closes gh-12651
2023-02-16 13:26:23 -06:00
Daniel Garnier-Moiroux
27059ced87
Default X-Xss-Protection header value to "0"
...
Closes gh-9631
2022-10-07 17:42:55 -05:00
Steve Riesenberg
8b490de08d
Merge branch '5.8.x'
...
# Conflicts:
# docs/modules/ROOT/pages/servlet/exploits/csrf.adoc
2022-10-05 14:46:15 -05:00
Steve Riesenberg
dce1c30522
Add support for BREACH
...
Closes gh-4001
2022-10-05 14:21:13 -05:00
Rob Winch
a5069d7e35
Fix Add @Configuration to @Enable*Security Usage
...
Issue gh-6613
2022-08-09 17:00:16 -05:00
Joshua Sattler
040111ae9e
Remove Configuration meta-annotation from Enable* annotations
...
Before, Spring Security's @Enable* annotations were meta-annotated with @Configuration.
While convenient, this is not consistent with the rest of the Spring projects and most notably
Spring Framework's @Enable annotations. Additionally, the introduction of support for
@Configuration(proxyBeanMethods=false) in Spring Framework provides a compelling reason to
remove @Configuration meta-annotation from Spring Security's @Enable annotations and allow
users to opt into their preferred configuration mode.
Closes gh-6613
Signed-off-by: Joshua Sattler <joshua.sattler@mailbox.org>
2022-07-30 03:48:42 +02:00
Eleftheria Stein
4142f06259
Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs
...
Closes gh-10003
2022-02-08 18:10:58 +01:00
Eleftheria Stein
4492e5b667
Replace WebSecurityConfigurerAdapter with SecurityFilterChain in docs
...
Closes gh-10003
2022-02-08 16:12:10 +01:00
Eleftheria Stein
28b363551e
Use lambda DSL in logout header docs
2022-02-04 16:26:51 +01:00
Eleftheria Stein
7c9de7d0ff
Use lambda DSL in logout header docs
2022-02-04 16:26:18 +01:00
Rob Winch
2fb056b5c1
Merge Clean up Reference Documentation
...
Closes gh-9668
2021-12-13 16:57:36 -06:00
Marcus Da Coregio
0beb725259
Add Cross Origin Policies headers
...
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers
Closes gh-9385, gh-10118
2021-12-08 11:07:09 +01:00
Marcus Da Coregio
65426a40ec
Add Cross Origin Policies headers
...
Add DSL support for Cross-Origin-Opener-Policy, Cross-Origin-Embedder-Policy and Cross-Origin-Resource-Policy headers
Closes gh-9385, gh-10118
2021-12-07 17:23:06 +01:00
Josh Cummings
76ebbb84f7
Separate Namespace Servlet Docs
...
Issue gh-10367
2021-11-05 12:45:46 -06:00
Josh Cummings
869e379099
Separate Namespace Servlet Docs
...
Issue gh-10367
2021-11-01 17:49:15 -06:00
Rob Winch
7a99542662
Docs Use Section Summary where appropriate
...
Closes gh-10449
2021-10-28 14:02:38 -05:00
Rob Winch
e681e44268
overview/ -> ../
2021-09-23 15:50:11 -05:00
