spring-security
spring-security copied to clipboard
Default to XorCsrfChannelInterceptor in XML configuration
Change WebSocketMessageBrokerSecurityBeanDefinitionParser to use XorCsrfChannelInterceptor by default, so WebSocket XML configuration matches the default Xor-based configuration already in WebSocketMessageBrokerSecurityConfiguration.
Issue gh-17260