Spring/spring-boot
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Polish

Browse Source
This commit is contained in:
Phillip Webb
2018-02-16 15:38:16 -08:00
parent d2039128b5
commit 9e75680e6f
32 changed files with 208 additions and 198 deletions
Download Patch File Download Diff File Expand all files Collapse all files

20
spring-boot-project/spring-boot-docs/src/main/asciidoc/spring-boot-features.adoc
View File

@@ -3155,17 +3155,22 @@ NOTE: Before setting the `management.endpoints.web.exposure.include`, ensure tha
exposed actuators do not contain sensitive information and/or are secured by placing them
behind a firewall or by something like Spring Security.
[[boot-features-security-csrf]]
==== Cross Site Request Forgery Protection
Since Spring Boot relies on Spring Security's defaults, CSRF protection is turned on by
default. This means that the actuator endpoints that require a `POST` (shutdown and
loggers endpoints), `PUT` or `DELETE` will get a 403 forbidden error when the default
security configuration is in use.
Since Spring Boot relies on Spring Security's defaults, CSRF protection is turned on by default.
This means that the actuator endpoints that require a `POST` (shutdown and loggers endpoints), `PUT`
or `DELETE` will get a 403 forbidden error when the default security configuration is in use.
NOTE: We recommend disabling CSRF protection completely only if you are creating a service
that is used by non-browser clients.
Additional information about CSRF protection can be found in the
{spring-security-reference}#csrf[Spring Security Reference Guide].
NOTE: We recommend disabling CSRF protection completely only if you are creating a service that
is used by non-browser clients.
Additional information about CSRF protection can be found in the {spring-security-reference}#csrf[Spring
Security Reference Guide].
[[boot-features-sql]]
== Working with SQL Databases
@@ -6130,6 +6135,7 @@ include::{code-examples}/test/web/RandomPortTestRestTemplateExampleTests.java[ta
----
[[boot-features-testing-spring-boot-applications-mocking-beans]]
==== Mocking and Spying Beans
When running tests, it is sometimes necessary to mock certain components within your