docs: update note

For APIs, it should not redirect.

Author: kenjis

user_guide_src/source/libraries/security.rst

@@ -121,8 +121,8 @@ Redirection on Failure
 Since v4.3.0, when a request fails the CSRF validation check,
 it will throw a SecurityException by default,
 
-.. note:: In production environment, it is recommended to enable this redirection
-    for a better user experience.
+.. note:: In production environment, when you use HTML forms, it is recommended
+    to enable this redirection for a better user experience.
 
 If you want to make it redirect to the previous page,
 change the following config parameter value in