Update docs/src/main/asciidoc/security-cors.adoc

Co-authored-by: Sergey Beryozkin <[email protected]>

Author: sithmein

docs/src/main/asciidoc/security-cors.adoc

@@ -36,7 +36,7 @@ For regular CORS requests, the filter denies access with an HTTP 403 status if t
 
 [NOTE]
 ====
-Despite its name the CORS filter also prevents CSRF attacks based on link:https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#using-standard-headers-to-verify-origin[Origin verification].
+Despite its name the CORS filter may also prevent CSRF attacks based on link:https://cheatsheetseries.owasp.org/cheatsheets/Cross-Site_Request_Forgery_Prevention_Cheat_Sheet.html#using-standard-headers-to-verify-origin[Origin verification].
 Therefore, since `Origin` headers are set by the browser, you may want to consider using it instead of the xref:security-csrf-prevention.adoc[REST CSRF filter].
 ====