---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Prevent users from accepting warning to bypass CSRF validation

# Prevent users from accepting warning to bypass CSRF validation {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Reduce the risk of Cross-Site Request Forgery (CSRF) by preventing users from accepting warning to bypass CSRF validation.
Enable CSRF token strict validation to prevent Cross-Site Request Forgery (CSRF) tokens from being reused, which may allow CSRF attacks.

Set the glide.security.csrf.strict.validation.mode system property value to true to enable CSRF token strict validation. If this property doesn't exist on your System Properties
\[sys_properties\] table, the default value is true starting in Xanadu.

## More information {#sc-prevent-users-from-accepting-warning-to-bypass-csrf-validation__section_lnh_pkf_32c}

{#sc-prevent-users-from-accepting-warning-to-bypass-csrf-validation__table_zyc_nlf_32c__entry__2}

| Attribute | Description |
|-|-|
| Technical configuration name | glide.security.csrf.strict.validation.mode |
| Plugin applicability | None |
| Security risk | Cross-site request forgery is a significant security risk that violates the integrity of the instance data. An attacker can launch the CSRF attack on any instance user by abusing the trust of the instance user. With the help of social engineering attacks, a user can submit a malformed request to the instance on behalf of the attacker. |
| Common Vulnerability Scoring System (CVSS) score | 3.7 |
| Common Vulnerability Scoring System (CVSS) rating | Low |
| Functional impact | This remediation enables an extra validation step before the user submits a write request to the instance. It checks whether the current CSRF token has been used previously. If it has, then it prevents submission of further write requests. |
| Dependencies and prerequisites | None |
| Data type | Boolean |
| Base system value | true |
| Fallback value | true |
| Recommended value | true |
[ ]

{#sc-prevent-users-from-accepting-warning-to-bypass-csrf-validation__table_zyc_nlf_32c}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).