diff --git a/docs/manual/src/docbook/csrf.xml b/docs/manual/src/docbook/csrf.xml index a2efae2fc4..894a96593f 100644 --- a/docs/manual/src/docbook/csrf.xml +++ b/docs/manual/src/docbook/csrf.xml @@ -136,6 +136,10 @@ amount=100.00&routingNumber=1234&account=9876&_csrf= differently. For passivity reasons, if you are using the XML configuration, CSRF protection must be explicitly enabled using the <csrf> element. Refer to the <csrf> element's documentation for additional customizations. + + SEC-2347 is logged to ensure Spring + Security 4.x's XML namespace configuration will enable CSRF protection by default. +