Cwikius-Spring/spring-security
1
0
Fork 0
mirror of synced 2026-08-04 17:27:13 +00:00
Code Issues Packages Projects Releases Wiki Activity

Mark CsrfTokenRequestAttributeHandler#setCsrfRequestAttributeName as Nullable

Browse Source 
Closes: gh-18617

Signed-off-by: Andrey Litvitski <andrey1010102008@gmail.com>
This commit is contained in:
Andrey Litvitski
2026-01-30 00:08:09 +03:00
committed by Josh Cummings
parent 544f635e9b
commit 6fcca39500
1 changed files with 4 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
web/src/main/java/org/springframework/security/web/csrf/CsrfTokenRequestAttributeHandler.java
+4 -2
View File
@@ -22,6 +22,7 @@ import jakarta.servlet.http.HttpServletRequest;
import jakarta.servlet.http.HttpServletResponse;
import org.apache.commons.logging.Log;
import org.apache.commons.logging.LogFactory;
import org.jspecify.annotations.Nullable;
import org.springframework.core.log.LogMessage;
import org.springframework.util.Assert;
@@ -33,13 +34,14 @@ import org.springframework.util.Assert;
*
* @author Steve Riesenberg
* @author Yoobin Yoon
* @author Andrey Litvitski
* @since 5.8
*/
public class CsrfTokenRequestAttributeHandler implements CsrfTokenRequestHandler {
private static final Log logger = LogFactory.getLog(CsrfTokenRequestAttributeHandler.class);
private String csrfRequestAttributeName = "_csrf";
@Nullable private String csrfRequestAttributeName = "_csrf";
/**
* The {@link CsrfToken} is available as a request attribute named
@@ -49,7 +51,7 @@ public class CsrfTokenRequestAttributeHandler implements CsrfTokenRequestHandler
* @param csrfRequestAttributeName the name of an additional request attribute with
* the value of the CsrfToken. Default is {@link CsrfToken#getParameterName()}
*/
public final void setCsrfRequestAttributeName(String csrfRequestAttributeName) {
public final void setCsrfRequestAttributeName(@Nullable String csrfRequestAttributeName) {
this.csrfRequestAttributeName = csrfRequestAttributeName;
}