Update to Spring Framework 6.0
Issue gh-10360
This commit is contained in:
@@ -305,7 +305,7 @@ This usually means that the user's application is creating a session somewhere,
|
||||
The most common culprit is a JSP. Many people aren't aware that JSPs create sessions by default.
|
||||
To prevent a JSP from creating a session, add the directive `<%@ page session="false" %>` to the top of the page.
|
||||
|
||||
If you are having trouble working out where a session is being created, you can add some debugging code to track down the location(s). One way to do this would be to add a `javax.servlet.http.HttpSessionListener` to your application, which calls `Thread.dumpStack()` in the `sessionCreated` method.
|
||||
If you are having trouble working out where a session is being created, you can add some debugging code to track down the location(s). One way to do this would be to add a `jakarta.servlet.http.HttpSessionListener` to your application, which calls `Thread.dumpStack()` in the `sessionCreated` method.
|
||||
|
||||
[[appendix-faq-forbidden-csrf]]
|
||||
=== I get a 403 Forbidden when performing a POST
|
||||
|
||||
@@ -709,7 +709,7 @@ Default is any HTTP method except "GET", "TRACE", "HEAD", "OPTIONS".
|
||||
[[nsa-custom-filter]]
|
||||
=== <custom-filter>
|
||||
This element is used to add a filter to the filter chain.
|
||||
It doesn't create any additional beans but is used to select a bean of type `javax.servlet.Filter` which is already defined in the application context and add that at a particular position in the filter chain maintained by Spring Security.
|
||||
It doesn't create any additional beans but is used to select a bean of type `jakarta.servlet.Filter` which is already defined in the application context and add that at a particular position in the filter chain maintained by Spring Security.
|
||||
Full details can be found in the xref:servlet/configuration/xml-namespace.adoc#ns-custom-filters[ namespace chapter].
|
||||
|
||||
|
||||
|
||||
Reference in New Issue
Block a user