CSRF Protection

Cross-site request forgery (CSRF) attacks exploit the trust between a signed-in user's browser and MyConnection Server (MCS). A malicious page can quietly submit a form or trigger a URL that targets MCS, and because the user is already authenticated, the request carries their session and privileges.

Enabling this option adds a validation layer that requires administrative requests to originate from the MCS web interface itself. If an MCS administrative request is referred from outside the MCS domain, it is blocked as a CSRF violation and the requester is redirected appropriately.

Cross-site request forgery protection

Tick Enable cross-site request forgery protection and click Save changes at the bottom of the page. From then on, administrative actions must be initiated from within the MCS interface.