Spring/spring-boot
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Revert default for CRSF enabled to false

Browse Source 
Fixes gh-12267
This commit is contained in:
Madhura Bhave
2018-02-28 08:54:43 -08:00
parent 452492183d
commit c2f7dd86dc
4 changed files with 9 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/security/SecurityProperties.java
View File

@@ -75,7 +75,7 @@ public class SecurityProperties implements SecurityPrerequisite {
/**
* Enable Cross Site Request Forgery support.
*/
private boolean enableCsrf = true;
private boolean enableCsrf = false;
private Basic basic = new Basic();

8
spring-boot-autoconfigure/src/test/java/org/springframework/boot/autoconfigure/security/SecurityPropertiesTests.java
View File

@@ -123,11 +123,11 @@ public class SecurityPropertiesTests {
}
@Test
public void testCSrf() {
assertThat(this.security.isEnableCsrf()).isEqualTo(true);
this.binder.bind(new MutablePropertyValues(
Collections.singletonMap("security.enable-csrf", false)));
public void testCsrf() {
assertThat(this.security.isEnableCsrf()).isEqualTo(false);
this.binder.bind(new MutablePropertyValues(
Collections.singletonMap("security.enable-csrf", true)));
assertThat(this.security.isEnableCsrf()).isEqualTo(true);
}
}