In https://docs.spring.io/spring-security/reference/features/exploits/csrf.html there is:
We could improve the protection and usability of SameSite protection against CSRF attacks by implementing gh-7537.
but that issue is closed.
Expected behavior, one of: - the note is removed - the note is linked to an open ticket - the docs are rewritten if the enhancmenet is already done