anchor.diff:  ----
   ====
   
  -can enable the Feature Policy header using Java configuration as shown below:
  -
  -.Feature-Policy Java Configuration
  -====
  -[source,java]
  +You can enable the Feature Policy header as shown below:
  +
  +.Feature-Policy Configuration
  +====
  +.Java
  +[source,java,role="primary"]
   ----
   @Bean
   SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  
positive.code: [[webflux-headers-content-type-options]]
  == Content Type Options
  Spring Security includes <<headers-content-type-options,Content-Type>> headers by default.
  However, you can disable it in Java Configuration with:
  
  .Content Type Options Disabled with Java Configuration
  ====
  [source,java]
  ----
  @Bean
  SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  
negative.code: 
  .Cache Control Disabled
  ====
  .Java
  [source,java,role="primary"]
  ----
  @Bean
  SecurityWebFilterChain springSecurityFilterChain(ServerHttpSecurity http) {
  