Rob Winch
32d3e29c65
SEC-2325: Polish CSRF Tag support
...
- Rename csrfField to csrfInput
- Make AbstractCsrfTag package scope
- rename FormFieldTag to CsrfInputTag
- rename MetaTagsTag to CsrfMetaTagsTag
- removed whitespace from tag output so output is
minimized & improving browser performance
- Update @since
- changed test names to be more meaningful
12 years ago
beamerblvd
a3e0475998
SEC-2325 Added JSP tags for CSRF meta tags and form fields
12 years ago
beamerblvd
26cee61b98
SEC-2335 Added ACL schema files for MySQL, SQL Server, Oracle
12 years ago
John Tims
56bb331760
SEC-2514: Fix typo in hellomvc.asc
...
packags -> packages
12 years ago
John Tims
1e3cdaf8a9
SEC-2513: Add link to SpringSource CLA form
12 years ago
Manimaran Selvan
1d6536fa71
SEC-2512: Fix typo in reference`
...
udates -> updates
12 years ago
Rob Winch
e15cee62f4
SEC-2511: Remove double ALLOW-FROM in X-Frame-Options header
12 years ago
getvictor
6de138c2f2
SEC-2511: Remove double ALLOW-FROM from X-Frame-Options header.
...
The interface documentation for getAllowFromValue states: Gets the value for ALLOW-FROM excluding the ALLOW-FROM.
12 years ago
Rob Winch
4cdeacc277
SEC-2499: Allow MethodSecurityExpressionHandler in parent context
...
Previously a NoSuchBeanDefintionException was thrown when the
MethodSecurityExpressionHandler was defined in the parent context. This
happened due to trying to work around ordering issues related to SEC-2136
This commit resolves this by not marking the
MethodSecurityExpressionHandler bean as lazy unless it exists.
12 years ago
Rob Winch
9988fa141c
Update Spring Security version in pom.xml
12 years ago
Rob Winch
8afa8d8588
Fix integration tests
12 years ago
Rob Winch
6dfdb10e31
Fix move to 4.0
12 years ago
Rob Winch
6be4e3a9fc
SEC-2506: Remove Bundlor Support
12 years ago
Rob Winch
04a527d4ec
SEC-2495: CSRF disables logout on GET
12 years ago
Rob Winch
de4ed136ea
Fix spring4 test
12 years ago
Rob Winch
4a1a2dfed4
Update min Spring version of 4.0.2.REELASE
12 years ago
Rob Winch
3fc9dd82f3
Start Spring Security 4.0.x
12 years ago
Spring Buildmaster
551f600073
Next development version
12 years ago
Rob Winch
f2cde4ffa3
SEC-2486: Update tests to Spring LDAP 2.0.1.RELEASE
12 years ago
Rob Winch
9810768186
SEC-2485: Update test to Spring 4.0.2.RELEASE
12 years ago
Rob Winch
7f99a2dfbb
SEC-2487: Update to Spring 3.2.8.RELEASE
12 years ago
Rob Winch
85305050c0
SEC-2455: Fix XML default login generation
12 years ago
Rob Winch
8a3a7961cb
SEC-2492: ExpressionUrlAuthorizationConfigurer private interceptUrl to void
12 years ago
Rob Winch
fc8e4868ce
SEC-2468: Fix tests
12 years ago
Rob Winch
65367e6547
SEC-2468: JdbcUserDetailsManager#createNewAuthentication uses null credentials
12 years ago
Rob Winch
bf2df220ca
SEC-2490: LdapAuthenticationProviderConfigurer allows custom LdapAuthoritiesPopulator
12 years ago
Rob Winch
152f41f61e
SEC-2392: KeyBasedPersistenceTokenService uses bytes instead of bits
...
The method setPseudoRandomNumberBits actually sets the number of bytes. This
commit deprecates setPseudoRandomNumberBits and adds
setPseudoRandomNumberBytes. The default value is still 256 to remain passive
but will be updated in 4.x.
12 years ago
Rob Winch
7a3da28987
SEC-2479: Search parent context for AuthenticationManager
12 years ago
Rob Winch
e17adad878
SEC-2469: Support Spring LDAP 2.0.1+
12 years ago
Luke Taylor
058b9debef
Minor slapd config changes
12 years ago
Rob Winch
6c35c33abe
SEC-2447: Fix AuthenticationManagerBuilder ordering issues
12 years ago
Rob Winch
c42e13c966
loginProcessing test
12 years ago
Rob Winch
6b42a2eae1
SEC-2461: Multi WebSecurityConfiguration does not create null springSecurityFilterChain
12 years ago
Rob Winch
ec8b48150d
SEC-2474: Update poms
12 years ago
Rob Winch
4eff50b48b
SEC-2474: Update tests against Spring 4.0.1
12 years ago
Rob Winch
087b56da96
SEC-2473: Update to Spring 3.2.7
12 years ago
Rob Winch
8d8475deb1
SEC-2455: form-login@login-processing-url & logout@logout-url use matchers
...
Remove the deprecation warnings of using setFilterProcessingUrl by invoking
the matcher methods instead.
12 years ago
Rob Winch
b5f5665ea6
SEC-2463: CSRF documentation includes EnableWebMvcSecurity
12 years ago
Rob Winch
3b05fd6fed
SEC-2466: Add link to MultipartFilter in CSRF multipart section
12 years ago
Rob Winch
4c84805ac9
SEC-2466: CSRF MutipartFilter doc now uses <url-pattern>
12 years ago
james
a99c6db327
SEC-2467: Fix Small errors in itest-web's jsps
12 years ago
Rob Winch
1f833b0d6b
Add ExpressionUrlAuthorizationCOnfigurer tests
...
- Demo custom expression root
- Demo @Bean in expression example
12 years ago
Spring Buildmaster
add3aae6ef
Next development version
12 years ago
Rob Winch
f09ce267b3
Polish MVC doc
12 years ago
Rob Winch
374aceed2b
Polish form.asc
12 years ago
Rob Winch
df703e0189
Polish hellomvc.asc
12 years ago
Rob Winch
8c580dc170
SEC-2444: Polish Thymeleaf for samples
12 years ago
Rob Winch
5205bf57c6
SEC-2453: Create 403 CSRF FAQ Entry
12 years ago
Rob Winch
994117ad75
SEC-2436: Fix CsrfConfigurerNoWebMvcTests
12 years ago
Rob Winch
b7041ed00e
SEC-2436: Add @EnableWebMvcSecurity
12 years ago