Spring/spring-security
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

SEC-2830: Cleanup disabling Same Origin SockJS

Browse Source 
- Defaults for properties false
- Add XML Namespace support
This commit is contained in:
Rob Winch
2015-02-24 10:15:12 -06:00
parent b9e2a57131
commit b9563f6102
7 changed files with 55 additions and 10 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
docs/manual/src/docs/asciidoc/index.adoc
View File

@@ -7815,6 +7815,9 @@ If additional control is necessary, the id can be specified and a ChannelSecurit
[[nsa-websocket-message-broker-id]]
* **id** A bean identifier, used for referring to the ChannelSecurityInterceptor bean elsewhere in the context. If specified, Spring Security requires explicit configuration within Spring Messaging. If not specified, Spring Security will automatically integrate with the messaging infrastructure as described in <<nsa-websocket-message-broker>>
[[nsa-websocket-message-broker-same-origin-disabled]]
* **same-origin-disabled** Disables the requirement for CSRF token to be present in the Stomp headers (default false). Changing the default is useful if it is necessary to allow other origins to make SockJS connections.
[[nsa-websocket-message-broker-children]]
===== Child Elements of <websocket-message-broker>