2 ms·Yes Spring Boot 2.2+ prevent csfr attacks out of the box.by olavgg 3y agoYes Spring Boot 2.2+ prevent csfr attacks out of the box.