来源：https://stackoverflow.com/questions/33037240/key-for-session-getattribute-is-null-using-owasp-csrftoken-on-a-spring-framewo 标签 spring-mvc spring-security csrf csrf-protection owasp
