disabling csrf

2016-10-11 11:41:48 -04:00
parent ee05ad932a
commit d9e7ab724d
1 changed files with 1 additions and 0 deletions
--- a/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java
+++ b/webgoat-container/src/main/java/org/owasp/webgoat/WebSecurityConfig.java
@ -64,6 +64,7 @@ public class WebSecurityConfig extends WebSecurityConfigurerAdapter {
        security.and()
                .logout()
                .permitAll();
+        security.and().csrf().disable();
        http.headers().cacheControl().disable();

    }