glide.security.csrf_previous.time_limit Sets how long a previous CSRF secure token remains valid, in seconds. With expired-token reuse enabled, the default 86,400-second limit allows reuse for up to one day; otherwise, the token expires with the user session.
86400The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property defines the duration a secure token remains valid, expiring when the user session ends unless specific conditions are met. |
|---|---|
| What area does it affect? | Security and session management |
| What does the default mean? | The default value is "86400", which sets the baseline numeric behavior for this property. |
| When should you review it? | Review this property when adjusting session security settings or addressing CSRF vulnerabilities. |
Raw metadata from the property record.
| Property name | glide.security.csrf_previous.time_limit |
|---|---|
| Sys ID | e05a7a940a0a0ba2005ec1ae61ad9466 |
| Type | integer |
| Application | Global |
| Default value | 86400 |
| Description | Time in seconds for a secure token to expire. When the user session expires, the secure token expires with it, unless the "allowing reuse of expired tokens are allowed" property is enabled, and its within the time frame described by this property This token is used to prevent cross site request forgery attacks. (default is 86400 seconds or 1 day) |
| Updated | 2024-05-25 05:04:41 |
Official references and nearby text excerpts where this property appears.
glide.securityOther properties in the same namespace.
glide.security.csrf.processor.all.authenticated.logging_enabled
It activates logging for Cross-Site Request Forgery violations in authenticated sessions, helping to track pot
glide.security.csrf.rest.public_csrf.enabled
This property enforces CSRF token validation for public REST API requests, requiring a valid token to prevent
glide.security.csrf.strict.validation.mode
This property determines whether strict validation of CSRF tokens is enforced, blocking requests with mismatch
glide.security.csrf_previous.allow
This property allows expired secure tokens to be used for request validation, impacting CSRF protection mechan
glide.security.diag_txns_acl
This property allows only admin users or users from specified IP addresses to access the stats.do, threads.do,
glide.security.disable_ui_pages_sysparm_client_script
This property prevents the evaluation of client scripts included in URL parameters for UI pages, enhancing sec
glide.security.empty_acl.popup_window.enabled
This property enables a popup window alerting users when an empty ACL is encountered, enhancing security aware
glide.security.empty_acl_bounce
This property triggers a fix for empty ACLs by adding a script to their configuration, ensuring they are prope