mirror of
https://github.com/spring-projects/spring-security.git
synced 2026-01-13 18:07:13 +00:00
This also removed the CsrfToken from the response headers to prevent the token from being saved. If user's wish to return the CsrfToken in the response headers, they should use the CsrfToken found on the request.