Roundcube Community Forum

Release Support => Release Discussion => Topic started by: graceastrid on November 10, 2020, 11:29:00 AM

Title: CSRF Enable
Post by: graceastrid on November 10, 2020, 11:29:00 AM

how can I enable CSRF protection? couldn't find any instructions in the documentation :-\

Title: Re: CSRF Enable
Post by: JohnDoh on November 10, 2020, 12:31:47 PM

CSRF protection is baked in, its not something that needs to be enabled. If you want to add extra security have a look at the use_secure_urls config options (and the notes about the URL rewrite rules)