anchor.diff:  		.csrf(csrf -> csrf.tokenFromMultipartDataEnabled(true))
   	return http.build();
   }
  -
  +----
  +
  +.Kotlin
  +[source,kotlin,role="secondary"]
  +----
  +@Bean
  +fun springSecurityFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
  +    return http {
  +		// ...
  +        csrf {
  +            tokenFromMultipartDataEnabled = true
  +        }
  +    }
  +}
   ----
   ====
   
  
positive.code: 
  .`CsrfToken` as `@ModelAttribute`
  ====
  [source,java]
  ----
  @ControllerAdvice
  public class SecurityControllerAdvice {
  
negative.code: 
  .Log out with HTTP GET
  ====
  .Java
  [source,java,role="primary"]
  ----
  @Bean
  public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  