Property reference

`glide.security.csrf.rest.public_csrf.enabled`

The glide.security.csrf.rest.public_csrf.enabled property enables CSRF token validation for public REST APIs using session-cookie authentication. When enabled, requests without a valid CSRF token are rejected, enhancing security against unauthorized actions.

Default: true
Type: boolean
Application: Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property enforces CSRF token validation for public REST API requests, requiring a valid token to prevent CSRF attacks.
What area does it affect?	REST API security
What does the default mean?	The default value is "true", which means this behavior is enabled by default.
When should you review it?	Review this property when configuring public REST APIs or assessing security measures.

Out of the box property record

Raw metadata from the property record.

Property name	`glide.security.csrf.rest.public_csrf.enabled`
Sys ID	`f14b6968ff2b62102431ffffffffff1a`
Type	boolean
Application	Global
Default value	`true`
Description	glide.security.csrf.rest.public_csrf.enabled
Updated	2025-08-20 17:35:35

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... on MID Server capabilities or performance. All MID Servers will continue to operate normally with the mid_server role permissions. Dependencies and prerequisites None CSRF enforcement for session-authenticated REST APIs The glide.security.csrf.rest.public_csrf.enabled property enables Cross- Site Request Forgery (CSRF‎ token validation for public REST APIs that use session-cookie authentication. A CSRF token is a unique, session-specific security token embedded in requests. The ...

More in `glide.security`

Other properties in the same namespace.

glide.security.3des.suspension_date This property records the timestamp for when the 3DES key removal job was paused, impacting key management pro glide.security.admin.override.accessterm This property, when set to true, ensures that the admin overridable condition is assessed specifically at the glide.security.attachment_type.use_blacklist This property enables or disables the validation of file attachments against defined exclusion lists to enhanc glide.security.csrf.processor.all.authenticated.logging_enabled It activates logging for Cross-Site Request Forgery violations in authenticated sessions, helping to track pot glide.security.csrf.strict.validation.mode This property determines whether strict validation of CSRF tokens is enforced, blocking requests with mismatch glide.security.csrf_previous.allow This property allows expired secure tokens to be used for request validation, impacting CSRF protection mechan glide.security.csrf_previous.time_limit This property defines the duration a secure token remains valid, expiring when the user session ends unless sp glide.security.diag_txns_acl This property allows only admin users or users from specified IP addresses to access the stats.do, threads.do,

All 47 properties in glide.security →