diff --git a/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java b/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java index c3294c93e7..eed9832b71 100644 --- a/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java +++ b/web/src/main/java/org/springframework/security/web/csrf/CsrfFilter.java @@ -170,7 +170,7 @@ public final class CsrfFilter extends OncePerRequestFilter { * {@link CsrfToken} available as a request attribute. * *
- * The default is {@link CsrfTokenRequestAttributeHandler}. + * The default is {@link XorCsrfTokenRequestAttributeHandler}. *
* @param requestHandler the {@link CsrfTokenRequestHandler} to use * @since 5.8