mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-05-23 06:54:42 +00:00
This also removed the CsrfToken from the response headers to prevent the token from being saved. If user's wish to return the CsrfToken in the response headers, they should use the CsrfToken found on the request.