---
schema_version: "1"
id: 9ad988c24fefe1840a306e521c929607efc54543a03b7c7af56f50c7c7351791
title: Cross-site Request Forgery (CSRF) Preferences for B2C Commerce
collection: admin
version: current
locale: en-us
portal_url: https://docs.salesforce.com/admin/current/en-us/cc/264-0-0/b2c_csrf_preferences.md
canonical_url: https://help.salesforce.com/s/articleView?id=cc.b2c_csrf_preferences.htm&release=264.0.0&type=5
source_site: help.salesforce.com
content_type: documentation
content_hash: c2be5d04569f7ba23d34ed73c447ac6e5ae854561abb181f1720a3444941ff64
description: To protect pages from CSRF attacks, Business Manager injects tokens into requests and logs failed validations. Use the log entries to troubleshoot failed requests.
products:
  - Commerce
  - B2C Commerce
release: "264"
---
# Cross-site Request Forgery (CSRF) Preferences for B2C Commerce

To protect pages from CSRF attacks, Business Manager injects tokens into requests and logs failed validations. Use the log entries to troubleshoot failed requests.

- **[cross-site request forgery (CSRF) Protection in Business Manager](https://help.salesforce.com/s/articleView?id=cc.b2c_csrf_protection_in_business_manager.htm&release=264.0.0&type=5)**  
    A CSRF attack is a technique used by malicious attackers to force a victim to make a protected request to B2C Commerce Business Manager ― a request that can severely disrupt your eCommerce business.
- **[Create cross-site request forgery (CSRF) Allowlists for B2C Commerce](https://help.salesforce.com/s/articleView?id=cc.b2c_configure_csfr_allowlist_settings.htm&release=264.0.0&type=5)**  
    Configure how your site handles CSRF allowlists.