Enabled CSRF in my Spring MVC application using Spring security 3.2.
My spring-security.xml
...
mean of
http .csrf() // ignore our stomp endpoints since they are protected using Stomp headers .ignoringAntMatchers("/chat/**")
example from : https://docs.spring.io/spring-security/site/docs/4.1.x/reference/htmlsingle/