diff --git a/adev/src/content/guide/http/setup.md b/adev/src/content/guide/http/setup.md
index 696077941dede..a1b7dce34f4af 100644
--- a/adev/src/content/guide/http/setup.md
+++ b/adev/src/content/guide/http/setup.md
@@ -83,11 +83,11 @@ HELPFUL: Prefer using [CORS](https://developer.mozilla.org/en-US/docs/Web/HTTP/C
 
 ### `withXsrfConfiguration(...)`
 
-Including this option allows for customization of `HttpClient`'s built-in XSRF security functionality. See the [security guide](guide/http/security) for more information.
+Including this option allows for customization of `HttpClient`'s built-in XSRF security functionality. See the [security guide](best-practices/security) for more information.
 
 ### `withNoXsrfProtection()`
 
-Including this option disables `HttpClient`'s built-in XSRF security functionality. See the [security guide](guide/http/security) for more information.
+Including this option disables `HttpClient`'s built-in XSRF security functionality. See the [security guide](best-practices/security) for more information.
 
 ## `HttpClientModule`-based configuration
 
@@ -95,12 +95,12 @@ Some applications may configure `HttpClient` using the older API based on NgModu
 
 This table lists the NgModules available from `@angular/common/http` and how they relate to the provider configuration functions above.
 
-| **NgModule** | `provideHttpClient()` equivalent |
-| - | - |
-| `HttpClientModule` | `provideHttpClient(withInterceptorsFromDi())` |
-| `HttpClientJsonpModule` |  `withJsonpSupport()` |
-| `HttpClientXsrfModule.withOptions(...)` | `withXsrfConfiguration(...)` |
-| `HttpClientXsrfModule.disable()` | `withNoXsrfProtection()` |
+| **NgModule**                            | `provideHttpClient()` equivalent              |
+| --------------------------------------- | --------------------------------------------- |
+| `HttpClientModule`                      | `provideHttpClient(withInterceptorsFromDi())` |
+| `HttpClientJsonpModule`                 | `withJsonpSupport()`                          |
+| `HttpClientXsrfModule.withOptions(...)` | `withXsrfConfiguration(...)`                  |
+| `HttpClientXsrfModule.disable()`        | `withNoXsrfProtection()`                      |
 
 <docs-callout important title="Use caution when using HttpClientModule in multiple injectors">
 When `HttpClientModule` is present in multiple injectors, the behavior of interceptors is poorly defined and depends on the exact options and provider/import ordering.