I know that Spring Security added built-in CSRF protection in version 3.2.0 as stated here: <http://docs.spring.io/spring-security/site/docs/3.2.0.CI-SNAPSHOT/reference/html/csrf.html> 

I am using Grails 2.4.3 with the spring-security-core plugin version 2.0.0 which seems to use Spring Security version 3.2.3, however, the CSRF protection is either not enabled or not present. 

I'm wondering if there's a way to turn it on in the plugin that I am missing. Is there a way to use one of the configuration methods mentioned in the link with this plugin? Any help would be appreciated! Thanks.

I know that later versions have this on by default, but upgrading Grails version is not an option for me, and later versions of the spring-security-core plugin require Grails 3.