$ {_ csrf.parameterName} and $ {_ csrf.token}, which are empty in the login form. I use Spring 4.1.3 and Spring Security 3.2.5
All configurations are done correctly, but still I get
<input type="hidden" name="${_csrf.parameterName}" value="${_csrf.token}"/>
and
<input type="hidden" name="" value=""/>
source
share