Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Default Require Explicit Save SecurityContext

Browse Source 
Closes gh-11762
This commit is contained in:
Rob Winch
2022-08-29 10:13:56 -05:00
parent b1fd9af723
commit 2efc8dcd15
8 changed files with 27 additions and 16 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
config/src/main/resources/org/springframework/security/config/spring-security-6.0.rnc
View File

@@ -354,7 +354,7 @@ http.attlist &=
## A reference to a SecurityContextRepository bean. This can be used to customize how the SecurityContext is stored between requests.
attribute security-context-repository-ref {xsd:token}?
http.attlist &=
## Optional attribute that specifies that the SecurityContext should require explicit saving rather than being synchronized from the SecurityContextHolder. Defaults to "false".
## Optional attribute that specifies that the SecurityContext should require explicit saving rather than being synchronized from the SecurityContextHolder. Defaults to "true".
attribute security-context-explicit-save {xsd:boolean}?
http.attlist &=
request-matcher?