Only set httpOnly and secure flags to Csrf cookie if the values are true#16189

phuongnq wants to merge 1 commit intospring-projects:mainspring-projects/spring-security:mainfrom

phuongnq:bugfix/only-set-cookies-flags-httponly-if-value-is-truephuongnq/spring-security:bugfix/only-set-cookies-flags-httponly-if-value-is-trueCopy head branch name to clipboard