From f577bbb681d17b91a5f09ce9ac9cfb987c55445c Mon Sep 17 00:00:00 2001
From: Spacecodee <79499732+spacecodee@users.noreply.github.com>
Date: Fri, 14 Feb 2025 17:58:52 -0500
Subject: [PATCH] Potential fix for code scanning alert no. 1: Disabled Spring
 CSRF protection

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
---
 .../security/config/HttpSecurityConfig.java                      | 1 -
 1 file changed, 1 deletion(-)

diff --git a/src/main/java/com/spacecodee/springbootsecurityopentemplate/security/config/HttpSecurityConfig.java b/src/main/java/com/spacecodee/springbootsecurityopentemplate/security/config/HttpSecurityConfig.java
index 8c1b141..291f629 100644
--- a/src/main/java/com/spacecodee/springbootsecurityopentemplate/security/config/HttpSecurityConfig.java
+++ b/src/main/java/com/spacecodee/springbootsecurityopentemplate/security/config/HttpSecurityConfig.java
@@ -37,7 +37,6 @@ public class HttpSecurityConfig {
     @Bean
     SecurityFilterChain securityFilterChain(HttpSecurity http) throws Exception {
         return http
-                .csrf(AbstractHttpConfigurer::disable)
                 .cors(Customizer.withDefaults())
                 .with(this.securityHeadersConfigurer, Customizer.withDefaults())
                 .sessionManagement(session -> session.sessionCreationPolicy(SessionCreationPolicy.STATELESS))