Anti-CSRF token validation time [New in Security Center 1.3]

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture
  • The glide.security.csrf_previous.time_limit property specifies the time in seconds for a secure token to expire.

    When a user session expires, the secure token expires with it unless the allowing reuse of expired tokens are allowed property is enabled, and it is within the time frame described by this property. This token is used to prevent cross site request forgery attacks.

    More information

    Attribute Description
    Configuration name glide.security.csrf_previous.time_limit
    Configuration type System Properties (/sys_properties_list.do)
    Data type integer
    Recommended value 86400 seconds or 1 day
    Default value 86400 seconds or 1 day
    Category Access control
    Security risk
    • Severity score: 5.3
    • CVSS score: Medium
    • Security risk details: Not setting this property to the recommended value disables the token validation used to prevent cross site request forgery attacks.
    Dependencies and prerequisites None
    Functional impact This property determines the duration in seconds for a secure token to remain valid. The secure token expires when the user session expires unless the allowing reuse of expired tokens property is enable, and the token is within the time frame specified in this property. This token prevents cross-site request forgery attacks. It has a default value of 86400 seconds or 1 day.