package io.traintracker.config;

import org.springframework.context.annotation.Configuration;
import org.springframework.security.config.annotation.web.builders.HttpSecurity;
import org.springframework.security.config.annotation.web.configuration.WebSecurityConfigurerAdapter;

@Configuration
public class SecurityConfiguration extends WebSecurityConfigurerAdapter {

	@Override
	protected void configure(HttpSecurity http) throws Exception {
		// @formatter:off
		http
			.authorizeRequests()
				.anyRequest().permitAll();
		// @formatter:on
	}

}

@@ -516,16 +516,144 @@
 mitAll()
+%0A%09%09%09%09.and()%0A%09%09%09.headers()%0A%09%09%09%09.httpStrictTransportSecurity()%0A%09%09%09%09%09.and()%0A%09%09%09%09.contentSecurityPolicy(%22default-src https: 'self'%22)
 ;%0A%09%09// @

Improve security headers