anchor.diff:  	return http.build();
   }
   -----
  +
  +.Kotlin
  +[source,kotlin,role="secondary"]
  +-----
  +@Bean
  +fun springSecurityFilterChain(http: ServerHttpSecurity): SecurityWebFilterChain {
  +    return http {
  +        // ...
  +        csrf {
  +            csrfTokenRepository = CookieServerCsrfTokenRepository.withHttpOnlyFalse()
  +        }
  +    }
  +}
  +-----
   ====
   
   [NOTE]
  
positive.code: 
  .Enable obtaining CSRF token from multipart/form-data
  ====
  [source,java]
  ----
  @Bean
  public SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  
negative.code: 	}
  }
  ----
  
  .Kotlin
  [source,kotlin,role="secondary"]
  ----
  @ControllerAdvice
  class SecurityControllerAdvice {
      @ModelAttribute
      fun csrfToken(exchange: ServerWebExchange): Mono<CsrfToken> {
          val csrfToken: Mono<CsrfToken>? = exchange.getAttribute(CsrfToken::class.java.name)
          return csrfToken!!.doOnSuccess { token ->
              exchange.attributes[CsrfRequestDataValueProcessor.DEFAULT_CSRF_ATTR_NAME] = token
          }
      }
  }
  ----
  ====
  
  Fortunately, Thymeleaf provides <<webflux-csrf-include-form-auto,integration>> that works without any additional work.
  