anchor.diff:  	return http.build();
   }
   ----
  +
  +.Kotlin
  +[source,kotlin,role="secondary"]
  +----
  +@Bean
  +fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
  +    return http {
  +        // ...
  +        headers {
  +            frameOptions {
  +                mode = Mode.SAMEORIGIN
  +            }
  +        }
  +    }
  +}
  +----
   ====
   
   If you do not want the defaults to be added and want explicit control over what should be used, you can disable the defaults.
  -An example for both Java configuration is provided below:
  +An example is provided below:
   
   .Disable HTTP Security Response Headers
   ====
  -[source,java]
  +.Java
  +[source,java,role="primary"]
   ----
   @Bean
   SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  
positive.code: 			.contentTypeOptions(contentTypeOptions -> contentTypeOptions.disable())
  		);
  	return http.build();
  }
  ----
  ====
  
negative.code: 			.xssProtection(xssProtection -> xssProtection.disable())
  		);
  	return http.build();
  }
  ----
  
  .Kotlin
  [source,kotlin,role="secondary"]
  ----
  @Bean
  fun webFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
      return http {
          // ...
          headers {
              xssProtection {
                  disable()
              }
          }
      }
  }
  ----
  ====
  