From 316886affc432daccfe04214ec259480a1e99a54 Mon Sep 17 00:00:00 2001
From: Rob Winch <rwinch@gopivotal.com>
Date: Tue, 14 Jul 2015 13:40:59 -0500
Subject: [PATCH] SEC-2931: Fix CsrfFilter Javadoc

---
 .../org/springframework/security/web/csrf/CsrfFilter.java   | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java b/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java
index 1699b09593..3a64da1ff4 100644
--- a/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java
+++ b/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java
@@ -46,7 +46,7 @@ import org.springframework.web.filter.OncePerRequestFilter;
  * <p>
  * Typically the {@link CsrfTokenRepository} implementation chooses to store the
  * {@link CsrfToken} in {@link HttpSession} with {@link HttpSessionCsrfTokenRepository}.
- * This is preferred to storing the token in a cookie which.
+ * This is preferred to storing the token in a cookie which can be modified by a client application.
  * </p>
  *
  * @author Rob Winch
@@ -72,7 +72,7 @@ public final class CsrfFilter extends OncePerRequestFilter {
 
 	/*
 	 * (non-Javadoc)
-	 * 
+	 *
 	 * @see
 	 * org.springframework.web.filter.OncePerRequestFilter#doFilterInternal(javax.servlet
 	 * .http.HttpServletRequest, javax.servlet.http.HttpServletResponse,
@@ -239,7 +239,7 @@ public final class CsrfFilter extends OncePerRequestFilter {
 
 		/*
 		 * (non-Javadoc)
-		 * 
+		 *
 		 * @see
 		 * org.springframework.security.web.util.matcher.RequestMatcher#matches(javax.
 		 * servlet.http.HttpServletRequest)