ignoringRequestMatchers

fun ignoringRequestMatchers(vararg requestMatchers: RequestMatcher)

Allows specifying HttpServletRequests that should not use CSRF Protection even if they match the requireCsrfProtectionMatcher.

Parameters

requestMatchers

the request matchers that should not use CSRF protection


fun ignoringRequestMatchers(vararg patterns: String)

Allows specifying HttpServletRequests that should not use CSRF Protection even if they match the requireCsrfProtectionMatcher.

Parameters

patterns

the patterns that should not use CSRF protection