<?xml version="1.0" encoding="utf-8"?>

<root>
  <csrf-protect-urls>
    <url>/api/hrm/login/checkLogin</url>
  </csrf-protect-urls>
  <no-csrf-protect-urls>
    <url>/api/workflow/reqform/docUpload</url>
	<url>/api/fna/occurredExpense/doSaveImpFile</url>
	<url>/api/cube/ipmexp/doupload</url>
	<url>/api/email/add/uploadImgForRichtext</url>
	<url>/api/workflow/reqform/doImportDetail</url>
	<url>/api/email/add/uploadFile</url>
	<url>/api/edc/page/uploadFile4Editor</url>
	<url>/api/portal/noticeadd/uploadImg</url>
  </no-csrf-protect-urls>
</root>