Skip to main content
1 of 2

Check the origin header server-wide in IIS to prevent CSRF through the IIS configuration change Only

Could you please let me know how can we check the origin header server-wide in IIS to prevent CSRF through the configuration change only without adding a custom HTTP module in IIS?