From 019c27b0a0bbf4672ee1a6e2a316119752febe6b Mon Sep 17 00:00:00 2001
From: Eleftheria Stein <eleftheria.kousathana@gmail.com>
Date: Fri, 18 Sep 2020 14:44:33 +0200
Subject: [PATCH] Add servlet HTTP exploit samples

Issue gh-8172
---
 .../_includes/servlet/exploits/http.adoc      | 23 +++++++++++++++++--
 1 file changed, 21 insertions(+), 2 deletions(-)

diff --git a/docs/manual/src/docs/asciidoc/_includes/servlet/exploits/http.adoc b/docs/manual/src/docs/asciidoc/_includes/servlet/exploits/http.adoc
index 07a83f3005..f9d8c3275b 100644
--- a/docs/manual/src/docs/asciidoc/_includes/servlet/exploits/http.adoc
+++ b/docs/manual/src/docs/asciidoc/_includes/servlet/exploits/http.adoc
@@ -12,9 +12,10 @@ If a client makes a request using HTTP rather than HTTPS, Spring Security can be
 
 For example, the following Java configuration will redirect any HTTP requests to HTTPS:
 
-.Redirect to HTTPS with Java Configuration
+.Redirect to HTTPS
 ====
-[source,java]
+.Java
+[source,java,role="primary"]
 ----
 @Configuration
 @EnableWebSecurity
@@ -31,6 +32,24 @@ public class WebSecurityConfig extends
 	}
 }
 ----
+
+.Kotlin
+[source,kotlin,role="secondary"]
+----
+@Configuration
+@EnableWebSecurity
+class SecurityConfig : WebSecurityConfigurerAdapter() {
+
+    override fun configure(http: HttpSecurity) {
+        http {
+            // ...
+            requiresChannel {
+                secure(AnyRequestMatcher.INSTANCE, "REQUIRES_SECURE_CHANNEL")
+            }
+        }
+    }
+}
+----
 ====
 
 The following XML configuration will redirect all HTTP requests to HTTPS