Add nohttp

Closes gh-6819

build.gradle

@@ -2,12 +2,14 @@ buildscript {
 	dependencies {
 		classpath 'io.spring.gradle:spring-build-conventions:0.0.23.RELEASE'
 		classpath "org.springframework.boot:spring-boot-gradle-plugin:$springBootVersion"
+classpath 'io.spring.nohttp:nohttp-gradle:0.0.1.BUILD-SNAPSHOT'
 	}
 	repositories {
 		maven { url 'https://repo.spring.io/plugins-snapshot' }
 		maven { url 'https://plugins.gradle.org/m2/' }
 	}
 }
+apply plugin: 'io.spring.nohttp'
 apply plugin: 'io.spring.convention.root'
 
 group = 'org.springframework.security'
@@ -19,6 +21,10 @@ ext.milestoneBuild = !(snapshotBuild || releaseBuild)
 
 dependencyManagementExport.projects = subprojects.findAll { !it.name.contains('-boot') }
 
+repositories {
+	maven { url 'https://repo.spring.io/libs-snapshot' }
+}
+
 subprojects {
 	plugins.withType(JavaPlugin) {
 		project.sourceCompatibility='1.8'

etc/nohttp/whitelist.lines

@@ -0,0 +1,7 @@
+^http://[^/]*nabble.com.*
+^http://blog.opensecurityresearch.com/.*
+^http://iharder.sourceforge.net/current/java/base64/
+^http://jaspan.com.*
+^http://lists.webappsec.org/.*
+^http://webblaze.cs.berkeley.edu/.*
+^http://www.zytrax.com/books/ldap/