The following links in the HttpSecurity javadoc are broken, pointing to "3.2.x" instead of "current", link below takes you directly too them.

CorsFilter (both instances) CorsConfiguration HandlerMappingIntrospector

http://docs.spring.io/spring-security/site/docs/current/apidocs/org/springframework/security/config/annotation/web/builders/HttpSecurity.html#cors--