mirror of
https://github.com/spring-projects/spring-security.git
synced 2025-02-23 15:20:19 +00:00
Previously if csrf() was used and subsequently not used, the TestCsrfTokenRepository was still used. This makes it difficult to test the actual CsrfTokenRepository implementation. Now the TestCsrfTokenRepository is only used if explicitly enabled. Fixes gh-4016