anchor.diff:  <global-method-security pre-post-annotations="enabled"/>
   ----
   
  -====== Access Control using @PreAuthorize and @PostAuthorize
  +===== Access Control using @PreAuthorize and @PostAuthorize
   The most obviously useful annotation is `@PreAuthorize` which decides whether a method can actually be invoked or not. For example (from the"Contacts" sample application)
   
   [source,java]
  
positive.code: Where a module depends on another Spring Security module, the non-optional dependencies of the module it depends on are also assumed to be required and are not listed separately.
  
  
  ==== spring-security-core
  
  The core module must be included in any  project using Spring Security.
  
  
negative.code: 
  
  [[nsa-xss-protection-parents]]
  ===== Parent Elements of <xss-protection>
  
  * <<nsa-headers,headers>>
  
  
  
  [[nsa-content-type-options]]
  ==== <content-type-options>
  Add the X-Content-Type-Options header with the value of nosniff to the response. This http://blogs.msdn.com/b/ie/archive/2008/09/02/ie8-security-part-vi-beta-2-update.aspx[disables MIME-sniffing] for IE8+ and Chrome extensions.
  
  
  [[nsa-content-type-options-parents]]
  ===== Parent Elements of <content-type-options>
  
  
  * <<nsa-headers,headers>>
  