Key questions about this property
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? |
This property allows expired secure tokens to be used for request validation, impacting CSRF protection mechanisms. |
| What area does it affect? |
Security and Authentication |
| What does the default mean? |
The default value is "false", which means this behavior is disabled by default. |
| When should you review it? |
Review this property when configuring CSRF protection settings or troubleshooting token validation issues. |
Out of the box property record
Raw metadata from the property record.
| Property name |
glide.security.csrf_previous.allow |
| Sys ID |
f9dfac5d0a0a0bb527ed8d28388809e9 |
| Type |
boolean |
| Application |
Global |
| Default value |
false |
| Description |
Allow usage of an expired secure token to identify and validate incoming requests. This token is used to prevent cross site request forgery attacks. |
| Updated |
2024-05-25 03:57:49 |
Sources
Official references and nearby text excerpts where this property appears.
Context preview
Snippet 1
... When the property is false, these additional checks are not validated. Dependencies and prerequisites None Block Expired Anti-CSRF Tokens Block expired CSRF tokens to prevent cross-site request forgery attacks. The glide.security.csrf_previous.allow system property enables use of an expired secure token to identify and validate incoming requests. This token is used to prevent cross-site request forgery attacks. Ensure that the property glide.security.csrf_previous.allow ...
Related properties