Handle special case of xssProtection

[SiBorea]

What's changed?

When it comes to xssProtection, the recipe will generate code like protection ->protection.xssProtectionEnabled(true). However, xssProtectionEnabled() is removed in spring-security-config-6+. xssProtection is set enabled as default and disabled on demand.

Checklist

• [✅] I've added unit tests to cover both positive and negative cases
• [✅] I've read and applied the recipe conventions and best practices
• [✅] I've used the IntelliJ IDEA auto-formatter on affected files

[github-actions]

Some suggestions could not be made:

• src/main/java/org/openrewrite/java/spring/boot2/ConvertToSecurityDslVisitor.java
  • lines 18-19
  • lines 33-32

[timtebeek]

Thanks a lot for the improved handling here @SiBorea , and your continued involvement throughout. Much appreciated!

[github-actions]

Some suggestions could not be made:

• src/testWithSpringBoot_2_4/java/org/openrewrite/java/spring/boot2/HeadersConfigurerLambdaDslTest.java
  • lines 20-20