spring-security注解配置

<?xml version="1.0" encoding="UTF-8"?>

<!--    配置不需要权限就能访问资源 css js -->
<security:http pattern="/css/**" security="none"></security:http>
<security:http pattern="/js/**" security="none"></security:http>
<security:http pattern="/img/**" security="none"></security:http>
<security:http pattern="/plugins/**" security="none"></security:http>
<security:http pattern="/template/**" security="none"></security:http>
<security:http pattern="/login.html" security="none"></security:http>


<!--      开启springsecurity自动配置 -->
<security:http auto-config="true">

    <security:headers>
        <!--            same origin 同源 （协议://ip:port 一样才是同源）-->
        <security:frame-options po