anchor.diff:  
   The Java configuration below will disable CSRF protection.
   
  -.Disable CSRF Java Configuration
  -====
  -[source,java]
  +.Disable CSRF
  +====
  +.Java
  +[source,java,role="primary"]
   ----
   @Configuration
   @EnableWebSecurity
  
positive.code: 		http
  			.csrf(csrf -> csrf.disable());
  	}
  }
  ----
  ====
  
negative.code: 	}
  }
  ----
  
  .Kotlin
  [source,kotlin,role="secondary"]
  ----
  @EnableWebSecurity
  class SecurityConfig : WebSecurityConfigurerAdapter() {
  
      override fun configure(http: HttpSecurity) {
         http {
              logout {
                  logoutRequestMatcher = AntPathRequestMatcher("/logout")
              }
          }
      }
  }
  ----
  ====
  
  
  