d28058303b
SEC-2349: Move FAQ into reference
12 years ago
4b43cf3f50
SEC-2349: Convert Reference to Asciidoctor
12 years ago
df5e034fc3
SEC-2282: Polish CSRF Documentation
12 years ago
8087cde628
SEC-2331: Include Expires: 0 in xsd and appendix
12 years ago
8fed90c26c
SEC-2282: Add links for AccessDeniedHandler in CSRF doc
12 years ago
3e95f1c12e
SEC-2282: Polish CSRF Documentation
12 years ago
ee33a6deeb
SEC-2285: Headers doc explicitly state default headers
12 years ago
17efd25717
SEC-2331: Include Expires: 0 in security headers documentation
12 years ago
06a0ec1a9f
SEC-2285: Polish Security Headers Documentation
...
Explain why (passivity) XML Namespace doesn't enable security headers by
default.
12 years ago
9bb283044f
SEC-2282: Polish CSRF Documentation
...
Explain why (passivity) XML Namespace doesn't enable csrf protection by
default.
12 years ago
a09756745f
SEC-2151: Support binding method arguments with Annotations
...
This allow utilizing method arguments for method access control on
interfaces prior to JDK 8.
13 years ago
1f3b812a66
SEC-2282: Polish CSRF Documentation
13 years ago
ef7cc40389
SEC-2282: Polish CSRF Documentation
13 years ago
d16106ef56
SEC-2309: Document CSRF multipart/form-data
13 years ago
e5804d323b
SEC-2256: Fix intercept-url doc precidence statement
...
Previously the documentation incorrectly stated "If a request matches
multiple patterns, the method-specific match will take precedence
regardless of ordering."
This has now been removed and InterceptUrlConfigTests was added previously
to ensure this was true.
13 years ago
f6587c8697
SEC-2312: Update javadoc link to Spring 3.2.x
13 years ago
98fe2322cd
SEC-2095: Fix Servlet API doc ids
13 years ago
fc16450344
Demonstrate rest.js CSRF support in reference docs
...
rest.js 0.9.4 added support for applying the CSRF header and token to
Ajax requests.
13 years ago
246c632f3a
SEC-2095: Document Servlet API support
13 years ago
86340b8016
SEC-2283: Polish headers doc
13 years ago
d89cf6db29
SEC-2283: Update headers documentation and tests
13 years ago
4761614c9f
SEC-2291: Fix internal links within reference
...
Instead of using xlink:href="# use linkend="
13 years ago
69aac09e1d
SEC-2285: Added headers to to reference
13 years ago
9483226d02
SEC-2282: Polish CSRF doc
13 years ago
98bdd32ca0
SEC-2282: Add CSRF documentation to the reference manual
13 years ago
18bd82e7d4
SEC-2131: Update doc to state session authentication sends 401 if no page
13 years ago
cd7055f725
SEC-2171: Include Information about pooling in Spring LDAP documentation
13 years ago
7f2308f46c
SEC-2146: Document AspectJ does not inherit annotations
13 years ago
03b235295e
SEC-2270: Remove duplicate version from guides index
13 years ago
efa9f4db93
SEC-2108: Fix typo in ldap section of manual
13 years ago
e8788f2657
SEC-2269: Fix markup for CSRF link
13 years ago
17c2a18fee
SEC-2269: Fix CSRF link in appendix
13 years ago
a3a432f7b6
SEC-2269: Fix additional links
13 years ago
3b2156969d
SEC-2269: Fix headers link
13 years ago
f707101fdb
SEC-2269: Fix headers documentation
13 years ago
eb95c500f5
Remove dockbook-reference from guides
13 years ago
658a93178c
SEC-2252: Add custom form guide
13 years ago
51b9c4a19a
Hide logout in main.jsp if not logged in
13 years ago
e9bb9e766e
SEC-1574: Add CSRF Support
13 years ago
5f35d9e3ec
SEC-2135: Document HttpServletRequest.changeSessionId() support
13 years ago
485676be8c
SEC-2251: Polish Hello World guides
...
* Correct how to add username and logout to mvc
* Externalize :revnumber:
13 years ago
13da42ca1b
SEC-2137: Allow disabling session fixation and enable concurrency control
13 years ago
e0cb931f69
SEC-2251: Create Hello World Java Configuration guides
13 years ago
333a7291a4
SEC-2242: Fixed typo in technical overview
...
Changed "source source" to "source"
13 years ago
e242aeff3e
SEC-2230: Polish and clickjacking demo
13 years ago
283c906215
SEC-2230: Fix reference PDF
13 years ago
988e97e366
SEC-2230: Polish headers reference
13 years ago
c85328c5d1
SEC-2230: HTTP Strict Transport Security (HSTS)Add support for Strict
...
This is a distinct filter as apposed to reusing StaticHeaderWriter
since the specification specifies that the "Strict-Transport-Security"
header should only be set on secure requests. It would not make sense to
require DelegatingRequestMatcherHeaderWriter since this requirement is
in the specification.
13 years ago
8013cd54d6
SEC-2230: Added Cache Control support
13 years ago
7b164bb5e1
SEC-2230: Polish pull request
13 years ago
Rob Winch
Scott Andrews
beamerblvd
Asaf David