diff --git a/docs/manual/src/docbook/core-filters.xml b/docs/manual/src/docbook/core-filters.xml
index 1523f77cf8..c8642e661a 100644
--- a/docs/manual/src/docbook/core-filters.xml
+++ b/docs/manual/src/docbook/core-filters.xml
@@ -241,17 +241,18 @@ public interface SecurityContextRepository {
changed). If you don't want a session to be created, then you can set this property
to false:
-
-
-
+ class="org.springframework.security.web.context.SecurityContextPersistenceFilter">
+
+
+
+
+
-
-
-]]> Alternatively you could provide a null implementation of the
- SecurityContextRepository interface, which will
- prevent the security context from being stored, even if a session has already been
- created during the request.
+]]> Alternatively you could provide an instance of
+ NullSecurityContextRepository, a null object
+ implementation, which will prevent the security context from being stored, even if a
+ session has already been created during the request.
diff --git a/web/src/main/java/org/springframework/security/web/context/SecurityContextPersistenceFilter.java b/web/src/main/java/org/springframework/security/web/context/SecurityContextPersistenceFilter.java
index 8ecc542be8..8c79482692 100644
--- a/web/src/main/java/org/springframework/security/web/context/SecurityContextPersistenceFilter.java
+++ b/web/src/main/java/org/springframework/security/web/context/SecurityContextPersistenceFilter.java
@@ -12,6 +12,7 @@ import javax.servlet.http.HttpSession;
import org.springframework.security.core.context.SecurityContext;
import org.springframework.security.core.context.SecurityContextHolder;
+import org.springframework.util.Assert;
import org.springframework.web.filter.GenericFilterBean;
/**
@@ -92,6 +93,7 @@ public class SecurityContextPersistenceFilter extends GenericFilterBean {
}
public void setSecurityContextRepository(SecurityContextRepository repo) {
+ Assert.notNull(repo, "SecurityContextRepository cannot be null");
this.repo = repo;
}