Key questions about this property
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? |
It configures the system to require a secure token for incoming requests, enhancing protection against CSRF attacks. |
| What area does it affect? |
Security and Request Validation |
| What does the default mean? |
The default value is "true", which means this behavior is enabled by default. |
| When should you review it? |
Review this property when assessing application security measures or during security audits. |
Out of the box property record
Raw metadata from the property record.
| Property name |
glide.security.use_csrf_token |
| Sys ID |
f9f03ca50a0a0bb5658db64889d967cb |
| Type |
boolean |
| Application |
Global |
| Default value |
true |
| Description |
Enable usage of a secure token to identify and validate incoming requests. This token is used to prevent cross site request forgery attacks. |
| Updated |
2024-05-25 04:30:29 |
Sources
Official references and nearby text excerpts where this property appears.
Context preview
Snippet 1
... false for upgraded instances • Location: For new instances, this property is available on the System Property [sys_properties] table. For upgrades, Add the property to the System Property [sys_properties] table. glide.security.use_csrf_token Enables usage or a secure token to identify and validate incoming requests. This token is used to prevent Cross Site Request Forgery (CSRF) attacks. For more information, see Enable anti-CSRF ...
Context preview
Snippet 2
... in an authenticated user. This property enables usage of a secure token to identify and validate incoming requests. This token is used to prevent cross site request forgery attacks. If glide.security.use_csrf_token is not set to the recommended value of true, then CSRF is possible. • Old description: Cross-Site Request Forgery (CSRF is an attack that forces authenticated users to submit a ...
Context preview
Snippet 3
... CI form select Open in Workspace to view CI health in CMDB Workspace or in Service Graph Workspace. This operation requires the sn_cmdb_user (CMDB user) role. Note: ◦Ensure that the glide.security.use_csrf_token property is set to true, allowing all results to appear. ◦When Level is set to Up to 2nd level relationships, the relationship type does not appear in the query results. ...
More in glide.security
Other properties in the same namespace.
All 64 properties in glide.security →