[[servlet-exploits]] = Protection Against Exploits This section discusses Servlet specific support for xref:features/exploits/index.adoc#exploits[Spring Security's protection against common exploits]. * xref:servlet/exploits/csrf.adoc[] * xref:servlet/exploits/headers.adoc[] * xref:servlet/exploits/http.adoc[] * xref:servlet/exploits/firewall.adoc[]