To protect pages from CSRF attacks, Business Manager injects tokens into requests and logs failed validations. Use the log entries to troubleshoot failed requests.
- cross-site request forgery (CSRF) Protection in Business Manager
A CSRF attack is a technique used by malicious attackers to force a victim to make a protected request to B2C Commerce Business Manager ― a request that can severely disrupt your eCommerce business. - Create cross-site request forgery (CSRF) Allowlists for B2C Commerce
Configure how your site handles CSRF allowlists.