Spring CSRF Protection prohibits form with Upload component

[derkoe]

When you have a multipart form (e.g. with Tapestry's upload component) and Spring Security CSRF activated then Spring's CsrfFilter prevents form submission (because parameters are in multipart request).

See also:

• https://jira.spring.io/browse/SEC-2309
• http://docs.spring.io/spring-security/site/docs/3.2.4.RELEASE/reference/htmlsingle/#csrf-multipart