请访问：https://docs.spring.io/spring-security/reference/6.3/servlet/exploits/csrf.html Spring Security Servlet Applications Protection Against Exploits Cross Site Request Forgery (CSRF) Protection Against Exploits Security HTTP Response Headers