(...) lic net. The Content-Security-Policy header will be merged with trusted domains. An example of configuration can be found in the article: HTTP headers in WEBCON BPS. csrf Protection Protection against csrf (Cross Site Request Forgery, XSRF) works by checking the Origin and Referrer headers in POST invocations from the user’s browser. A correct configurati (...)