Worked on the spring-projects/spring-security repository, focusing on backend development and security configuration using Java. Delivered a feature that refactored the WebSocket CSRF decision logic within the message broker security configuration, replacing multiple string equality checks with a Set.contains() approach. This technical change preserved the existing functional behavior while improving code readability and maintainability. By eliminating brittle string comparisons in the CSRF decision path, the update reduced complexity and the risk of future regressions. The work resulted in a cleaner, more extensible codebase for handling CSRF in WebSocket scenarios, supporting easier future enhancements and ongoing security reliability.