config/src/main/java/org/springframework/security/config/annotation/web/configurers/CsrfConfigurer.java
public CsrfConfigurer<H> requireCsrfProtectionMatcher(
			RequestMatcher requireCsrfProtectionMatcher) {
		Assert.notNull(requireCsrfProtectionMatcher,
				"requireCsrfProtectionMatcher cannot be null");
		this.requireCsrfProtectionMatcher = requireCsrfProtectionMatcher;
		return this;
	}
public CsrfConfigurer<H> requireCsrfProtectionMatcher(
			RequestMatcher requireCsrfProtectionMatcher) {
		Assert.notNull(requireCsrfProtectionMatcher,
				"requireCsrfProtectionMatcher cannot be null");
		this.requireCsrfProtectionMatcher = requireCsrfProtectionMatcher;
		return this;
	}
Specify the {@link RequestMatcher} to use for determining when CSRF should be
applied. The default is to ignore GET, HEAD, TRACE, OPTIONS and process all other
requests.

@param requireCsrfProtectionMatcher the {@link RequestMatcher} to use
@return the {@link CsrfConfigurer} for further customizations