---
title: Session Policy – Enable Content Security Policy
description: "**Impact area** Security **Severity** Medium **Affected element** Org Config ## Rule ID **SF-0172** ## Impact Increased vulnerability to Cross-Site Request Forgery (CSRF) attacks. ## Remediation Enable this setting. From Setup, enter \"Session Settings\" in the Quick Find box, then select…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/session-policy-enable-content-security-policy/"
updated: "2025-03-21"
category: Rules
---

# Session Policy – Enable Content Security Policy

**Impact area**

Security

**Severity**

Medium

**Affected element**

Org Config

## Rule ID

**SF-0172**

## Impact

Increased vulnerability to Cross-Site Request Forgery (CSRF) attacks.

## Remediation

Enable this setting. From Setup, enter "Session Settings" in the Quick Find box, then select Session Settings. Then enable "Enable Stricter Content Security Policy".

### Time to fix

30 min

## References

This rule is linked to [CWE-1021: Improper Restriction of Rendered UI Layers or Frames](https://cwe.mitre.org/data/definitions/1021.html).