Skip to main content

         This documentation site is for previous versions. Visit our new documentation site for current releases.      

Cross-Site Request Forgery (CSRF)

Updated on July 27, 2021

Cross-Site Request Forgery (CSRF), also known as an XSRF or a sea surf, is a web security attack in which an intruder tricks customers to perform certain malicious activities on their web applications where they are currently authenticated. When you enable the CSRF token check in the Pega Customer Service application Dev Studio, the system defends activities and streams from the CSRF attack.

  • Previous topic Configuring the content security policy
  • Next topic CSRF Settings for chat-specific activities and streams

Have a question? Get answers now.

Visit the Support Center to ask questions, engage in discussions, share ideas, and help others.

Did you find this content helpful?

Want to help us improve this content?

We'd prefer it if you saw us at our best. is not optimized for Internet Explorer. For the optimal experience, please use:

Close Deprecation Notice
Contact us