Neil Griffin

Here is a new project that I created that shows how to make it work -- it defines a portlet with a JSP that has test URLs that you can...

@BaranovNikita Note that the reason why CSRF is enforced is because you specified it in the configuration: ``` @Override protected void configure(HttpSecurity http) throws Exception { http .csrf() .disable() .cors()...

@BaranovNikita You're right, I didn't see the call to `disable()`. Do you have the following bean defined in one of your Spring XML config files? If so, then CSRF will...

[com.liferay.test.portletmvc4spring.portlet-try2-src.zip](https://github.com/liferay/portletmvc4spring/files/4533817/com.liferay.test.portletmvc4spring.portlet-try2-src.zip)

You might need to use an absolute URL that contains the scheme, server, port etc like "http://localhost:8080/o/com.liferay.test.portletmvc4spring.portlet/test/secured" Here is an example that I recently got to work in portlet JSP:...