core/modules/rest/src/Routing/ResourceRoutes.php | 1 +
 1 file changed, 1 insertion(+)

diff --git a/core/modules/rest/src/Routing/ResourceRoutes.php b/core/modules/rest/src/Routing/ResourceRoutes.php
index 0c616ef..a8449f9 100644
--- a/core/modules/rest/src/Routing/ResourceRoutes.php
+++ b/core/modules/rest/src/Routing/ResourceRoutes.php
@@ -95,6 +95,7 @@ protected function getRoutesForResourceConfig(RestResourceConfigInterface $rest_
       // Only expose routes
       // - that have an explicit method and allow >=1 format for that method
       // - that exist for BC
+      // @see \Drupal\rest\RouteProcessor\RestResourceGetRouteProcessorBC
       if (($methods && ($method = $methods[0]) && $supported_formats = $rest_resource_config->getFormats($method)) || $route->hasOption('bc_route')) {
         $route->setRequirement('_csrf_request_header_token', 'TRUE');