This is an automated email from the ASF dual-hosted git repository. mattsicker pushed a commit to branch release-2.x in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
commit a4590f7b7bab114658fa1f6e1267e9ae588cbab3 Author: Matt Sicker <[email protected]> AuthorDate: Sat Jan 29 00:42:00 2022 -0600 Remove CSRF disabling in sample code Don't want to encourage bad practices after all. --- .../log4j/spring/cloud/config/service/config/SecurityConfiguration.java | 1 - 1 file changed, 1 deletion(-) diff --git a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/src/main/java/org/apache/logging/log4j/spring/cloud/config/service/config/SecurityConfiguration.java b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/src/main/java/org/apache/logging/log4j/spring/cloud/config/service/config/SecurityConfiguration.java index 1abf6d7..98c0963 100644 --- a/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/src/main/java/org/apache/logging/log4j/spring/cloud/config/service/config/SecurityConfiguration.java +++ b/log4j-spring-cloud-config/log4j-spring-cloud-config-samples/log4j-spring-cloud-config-sample-server/src/main/java/org/apache/logging/log4j/spring/cloud/config/service/config/SecurityConfiguration.java @@ -32,6 +32,5 @@ public class SecurityConfiguration extends WebSecurityConfigurerAdapter { web.ignoring().antMatchers("/health") .antMatchers("/metrics") .antMatchers("/info"); - getHttp().csrf().disable(); } }
