CSRF Mitigation Recommendations

Cross-Site Request Forgery (CSRF) attacks are attacks that force a user's web browser to perform unwanted actions on a trusted web application where the user is authenticated.

PPM implements CSRF mitigation by using a new CSRF token for every new session. To enable the mitigation, set the FORCE_NEW_CSRF_TOKEN_ON_NEW_SESSION parameter to true. When this parameter is set to true, each time when a user successfully logs in to PPM, a new CSRF token is generated. When a user closes the web browser, the CSRF token changes.