SpringSecurity解决POST方式下CSRF问题

@Override
protected void configure(httpsecurity http) throws Exception {
     //屏蔽CSRF控制
     http.csrf().disable()
    ... 
}

var headers = {};
headers['X-CSRF-TOKEN'] = "[[${_csrf.token}]]";
$.ajax({
    url: url,
    type: "POST",
    headers: headers,
    dataType: "JSON",
    success: function(result) {
    }
});

$.ajax({
    url: url,
    data: {
        "[[${_csrf.parameterName}]]": "[[${_csrf.token}]]"
        },
    type: "POST",
    dataType: "json",
    success: function(result) {
    }
});

<input type="hidden" th:name="${_csrf.parameterName}" 
    th:value="${_csrf.token}">