diff --git a/web/src/main/java/org/springframework/security/web/server/firewall/StrictServerWebExchangeFirewall.java b/web/src/main/java/org/springframework/security/web/server/firewall/StrictServerWebExchangeFirewall.java
index e56c6160f7a..c71e81c98f8 100644
--- a/web/src/main/java/org/springframework/security/web/server/firewall/StrictServerWebExchangeFirewall.java
+++ b/web/src/main/java/org/springframework/security/web/server/firewall/StrictServerWebExchangeFirewall.java
@@ -30,6 +30,7 @@
 
 import org.springframework.http.HttpHeaders;
 import org.springframework.http.HttpMethod;
+import org.springframework.http.ReadOnlyHttpHeaders;
 import org.springframework.http.server.reactive.ServerHttpRequest;
 import org.springframework.http.server.reactive.ServerHttpRequestDecorator;
 import org.springframework.http.server.reactive.ServerHttpResponse;
@@ -743,7 +744,7 @@ public MultiValueMap<String, String> getQueryParams() {
 				return queryParams;
 			}
 
-			private final class StrictFirewallHttpHeaders extends HttpHeaders {
+			private final class StrictFirewallHttpHeaders extends ReadOnlyHttpHeaders {
 
 				private StrictFirewallHttpHeaders(HttpHeaders delegate) {
 					super(delegate);