浏览代码

SEC-2466: CSRF MutipartFilter doc now uses <url-pattern>

Rob Winch 11 年之前
父节点
当前提交
4c84805ac9
共有 1 个文件被更改,包括 2 次插入3 次删除
  1. 2 3
      docs/manual/src/asciidoc/index.adoc

+ 2 - 3
docs/manual/src/asciidoc/index.adoc

@@ -3244,7 +3244,7 @@ There are two options to using CSRF protection with multipart/form-data. Each op
 
 [NOTE]
 ====
-More information about using multipart forms with Spring can be found within the http://docs.spring.io/spring/docs/3.2.x/spring-framework-reference/html/mvc.html#mvc-multipart[17.10 Spring's multipart (file upload) support] section of the Spring reference.
+Before you integrate Spring Security's CSRF protection with multipart file upload, ensure that you can upload without the CSRF protection first. More information about using multipart forms with Spring can be found within the http://docs.spring.io/spring/docs/3.2.x/spring-framework-reference/html/mvc.html#mvc-multipart[17.10 Spring's multipart (file upload) support] section of the Spring reference.
 ====
 
 [[csrf-multipartfilter]]
@@ -3278,13 +3278,12 @@ To ensure `MultipartFilter` is specified before the Spring Security filter with
 </filter>
 <filter-mapping>
     <filter-name>MultipartFilter</filter-name>
-    <servlet-name>/*</servlet-name>
+    <url-pattern>/*</url-pattern>
 </filter-mapping>
 <filter-mapping>
     <filter-name>springSecurityFilterChain</filter-name>
     <url-pattern>/*</url-pattern>
 </filter-mapping>
-
 ----
 
 [[csrf-include-csrf-token-in-action]]