Share this page

# CSRF Mitigation Recommendations

Cross-Site Request Forgery (CSRF) attacks are attacks that force a user's web browser to perform unwanted actions on a trusted web application where the user is authenticated.

PPM implements CSRF mitigation by using a new CSRF token for every new session. To enable the mitigation, set the FORCE_NEW_CSRF_TOKEN_ON_NEW_SESSION parameter to `true`. When this parameter is set to `true`, each time when a user successfully logs in to PPM, a new CSRF token is generated. When a user closes the web browser, the CSRF token changes.

https://admhelp.microfocus.com PPM 8942
Tips to improve your search results... OpenText™ Project and Portfolio Management Help Center PPM Help 26.2-26.3 All View Local Help Center View Online Help Center Version: