Property reference

`glide.security.csrf.processor.all.authenticated.enabled`

The glide.security.csrf.processor.all.authenticated.enabled property enables Cross-Site Request Forgery (CSRF) checks for authenticated processor requests. Admins should care about this setting to enhance security by preventing unauthorized actions through session cookies.

Default: Not stated
Type: Not stated
Application: Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property enforces CSRF token validation for authenticated requests, rejecting those without valid tokens to protect against CSRF attacks.
What area does it affect?	Security and Authentication
What does the default mean?	No default value is stated in the ServiceNow documentation.
When should you review it?	Review this property when configuring security settings or troubleshooting authentication-related issues.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`glide.security.csrf.processor.all.authenticated.enabled`
Type	Not stated
Application	Not stated
Default value	Not stated
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... prerequisites None Enable CSRF enforcement for authenticated processors Enable Cross-Site Request Forgery (CSRF‎ enforcement to protect authenticated processor requests from CSRF attacks when session cookies are used for authentication. The glide.security.csrf.processor.all.authenticated.enabled property enables CSRF checks for authenticated processor requests. When set to true, the platform checks for CSRF violations after session cookie authentication succeeds. If a violation is detected and the ...

More in `glide.security`

Other properties in the same namespace.

glide.security.allow_unauth_roleless_acl This property controls access for unauthenticated users to resources governed by roleless scripted Access Cont glide.security.attachment_type.use_blacklist This property enables or disables the validation of file attachments against defined exclusion lists to enhanc glide.security.csrf.handle.ajax.timeout This property determines whether the system provides error handling for timed-out Ajax requests, enhancing use glide.security.csrf.httpauth_processor_allowlist This property allows specified processors to bypass CSRF enforcement when the broader CSRF checks for authenti glide.security.csrf.processor.all.authenticated.logging_enabled It activates logging for Cross-Site Request Forgery violations in authenticated sessions, helping to track pot glide.security.csrf.rest.public_csrf.enabled This property enforces CSRF token validation for public REST API requests, requiring a valid token to prevent glide.security.csrf.strict.validation.mode This property determines whether strict validation of CSRF tokens is enforced, blocking requests with mismatch glide.security.csrf_previous.allow This property allows expired secure tokens to be used for request validation, impacting CSRF protection mechan

All 62 properties in glide.security →