diff --git a/docs/manual/src/docbook/headers.xml b/docs/manual/src/docbook/headers.xml
index 3eb41133ec..fb732e2f00 100644
--- a/docs/manual/src/docbook/headers.xml
+++ b/docs/manual/src/docbook/headers.xml
@@ -26,9 +26,13 @@
While each of these headers are considered best practice, it should be noted that not all clients
- utilize the headers, so additional testing is encouraged. If you are using Spring Security's XML namespace support,
- you can easily add all of the default headers with the
- <headers> element with no child elements:
+ utilize the headers, so additional testing is encouraged. For passivity reasons, if you are using Spring Security's
+ XML namespace support, you must explicitly enable the security headers. All of the default headers can be easily added
+ using the <headers> element with no child elements:
+
+ SEC-2348 is logged to ensure Spring
+ Security 4.x's XML namespace configuration will enable Security headers by default.
+