glide.security.csrf.strict.validation.mode The glide.security.csrf.strict.validation.mode property enforces strict validation of CSRF tokens. When enabled, it prevents request resubmission if the CSRF token does not match, enhancing security against cross-site request forgery attacks.
falseThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property determines whether strict validation of CSRF tokens is enforced, blocking requests with mismatched tokens. |
|---|---|
| What area does it affect? | Security and validation |
| What does the default mean? | The default value is "false", which means this behavior is disabled by default. |
| When should you review it? | Review this property when configuring security settings or addressing CSRF vulnerabilities. |
Raw metadata from the property record.
| Property name | glide.security.csrf.strict.validation.mode |
|---|---|
| Sys ID | 5fe329bb1b733000227e5581be071317 |
| Type | boolean |
| Application | Global |
| Default value | false |
| Description | When it is set to true, it enforces CSRF token strict validation that does not allow resubmit the request if CSRF token does not match. |
| Updated | 2024-05-25 04:02:06 |
Official references and nearby text excerpts where this property appears.
glide.securityOther properties in the same namespace.
glide.security.3des.suspension_date
This property records the timestamp for when the 3DES key removal job was paused, impacting key management pro
glide.security.admin.override.accessterm
This property, when set to true, ensures that the admin overridable condition is assessed specifically at the
glide.security.attachment_type.use_blacklist
This property enables or disables the validation of file attachments against defined exclusion lists to enhanc
glide.security.csrf.processor.all.authenticated.logging_enabled
It activates logging for Cross-Site Request Forgery violations in authenticated sessions, helping to track pot
glide.security.csrf_previous.allow
This property allows expired secure tokens to be used for request validation, impacting CSRF protection mechan
glide.security.csrf_previous.time_limit
This property defines the duration a secure token remains valid, expiring when the user session ends unless sp
glide.security.diag_txns_acl
This property allows only admin users or users from specified IP addresses to access the stats.do, threads.do,
glide.security.empty_acl.popup_window.enabled
This property enables a popup window alerting users when an empty ACL is encountered, enhancing security aware