---
title: "Cross-Site Request Forgery (CSRF) Protection On POST Requests On Non-Setup Pages Is Disabled"
description: "Impact Area Security Severity Warning Affected Element Org Config ## Rule ID **SF-0158** ## Impact Increased vulnerability to Cross-Site Request Forgery (CSRF) attacks. ## Remediation Enable this setting as described in [this Salesforce knowledgebase article.](https://help.salesforce.com/articleView?id=000230653&type=1) ### Time to fix 30 min ##…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/salesforce-rules/cross-site-request-forgery-csrf-protection-on-post-requests-on-non-setup-pages-is-disabled/"
updated: "2025-03-21"
category: Rules
---

# Cross-Site Request Forgery (CSRF) Protection On POST Requests On Non-Setup Pages Is Disabled

Impact Area

Security

           Severity

Warning

           Affected Element

Org Config

## Rule ID

**SF-0158**

## Impact

Increased vulnerability to Cross-Site Request Forgery (CSRF) attacks.

## Remediation

Enable this setting as described in [this Salesforce knowledgebase article.](https://help.salesforce.com/articleView?id=000230653&type=1)

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-352 Cross-Site Request Forgery (CSRF)](https://cwe.mitre.org/data/definitions/352.html).