SEC-3120: Remove .and() from httpStrictTransportSecurity() doc

This commit is contained in:
Rob Winch 2015-10-30 09:11:47 -05:00
parent 4144de9376
commit c93d6bc823
1 changed files with 5 additions and 7 deletions

View File

@ -3546,17 +3546,15 @@ You can easily do this with the following Java Configuration:
---- ----
@EnableWebSecurity @EnableWebSecurity
public class WebSecurityConfig extends public class WebSecurityConfig extends
WebSecurityConfigurerAdapter { WebSecurityConfigurerAdapter {
@Override @Override
protected void configure(HttpSecurity http) throws Exception { protected void configure(HttpSecurity http) throws Exception {
http http
// ... // ...
.headers() .headers()
.frameOptions() .frameOptions().sameOrigin()
.sameOrigin() .httpStrictTransportSecurity().disable();
.and()
.httpStrictTransportSecurity().disable();
} }
} }
---- ----