Spring Security 4.1.1 Released
I’m pleased to announce the release of Spring Security 4.1.1.RELEASE which resolves over 50 issues. This release provides mitigation for CVE-2016-5007 There are also lots of bug fixes, but there are also a few notable enhancements.
-
MvcRequestMatcher provides deep integration with Spring MVC to ensure consistent path matching strategies for authorization rules
-
CORS Support that can leverage Spring MVC’s CORS configuration
-
CookieCsrfTokenRepository.withHttpOnlyFalse() for easily integrating with AngularJS applications
Contributions
Without the community we couldn’t be the successful…