diff --git a/web/src/main/java/org/springframework/security/web/FilterChainProxy.java b/web/src/main/java/org/springframework/security/web/FilterChainProxy.java
index 7795f2c8bac..57f33e0029d 100644
--- a/web/src/main/java/org/springframework/security/web/FilterChainProxy.java
+++ b/web/src/main/java/org/springframework/security/web/FilterChainProxy.java
@@ -254,6 +254,11 @@ private List<Filter> getFilters(HttpServletRequest request) {
 
 	/**
 	 * Convenience method, mainly for testing.
+	 * <p>
+	 * Attempt to find the matching filter chain based on the given {@code url}. Note that
+	 * the URI is often not enough information and this method should be used with
+	 * caution. Instead, consider using Spring Security's testing support that mocks a
+	 * full HTTP request.
 	 * @param url the URL
 	 * @return matching filter list
 	 */