Package org.springframework.security.messaging.web.csrf
@NullMarked
package org.springframework.security.messaging.web.csrf
Support CSRF protection in messages.
-
ClassesClassDescription
ChannelInterceptor
that validates that a valid CSRF is included in the header of anySimpMessageType.CONNECT
message.ChannelInterceptor
that validates a CSRF token masked by theXorCsrfTokenRequestAttributeHandler
in the header of anySimpMessageType.CONNECT
message.