From 84902ebb50e29bba92f078f3e74be4f76d2c0b72 Mon Sep 17 00:00:00 2001 From: Luke Taylor Date: Tue, 24 May 2011 12:01:04 +0100 Subject: [PATCH] Javadoc correction. --- .../AbstractAuthenticationTargetUrlRequestHandler.java | 5 ++--- 1 file changed, 2 insertions(+), 3 deletions(-) diff --git a/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java b/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java index 000f14971c..aada4ae597 100644 --- a/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java +++ b/web/src/main/java/org/springframework/security/web/authentication/AbstractAuthenticationTargetUrlRequestHandler.java @@ -30,9 +30,8 @@ import org.springframework.util.StringUtils; * will be used for the destination. * *
  • - * If {@code useTargetUrlparameter} is {@code true}, and a parameter matching the {@code targetUrlParameter} has been - * set on the request, the value will be used as the destination. The default parameter name is - * {@code spring-security-redirect}. If you are enabling this functionality, then you should ensure that the parameter + * If a parameter matching the value of {@code targetUrlParameter} has been set on the request, the value will be used + * as the destination. If you are enabling this functionality, then you should ensure that the parameter * cannot be used by an attacker to redirect the user to a malicious site (by clicking on a URL with the parameter * included, for example). Typically it would be used when the parameter is included in the login form and submitted with * the username and password.