O'Reilly logo
  • LEI HAN thinks this is interesting:

From

Cover of Pro Spring Security

Note

当开启了csrf的场合,/logout必须通过POST方式调用。