spring-mvc - Cannot resolve variable _csrf in Spring MVC Application

Question

i have been trying to add xss protection via including the code

 <input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}"/>

While execution it passes

<input type="hidden" name="" value=""/>

My SecurityConfig File is

@Configuration
@EnableWebSecurity
public class DemoSecurityConfig extends WebSecurityConfigurerAdapter {
    @Override
    protected void configure(HttpSecurity http) throws Exception {
        http.authorizeRequests()
                .anyRequest().authenticated()
                .and()
                .formLogin()
                    .loginPage("/app/")
                    .loginProcessingUrl("/app/login")
                    .permitAll();
    }
}

Is there anything i want to add?

标签： spring-mvcspring-bootspring-securitycsrfcsrf-protection