Some Jenkins features (like the REST API) are more difficult to use when this
option is enabled. Some features, especially in plugins not tested with this
option enabled, may not work at all. Some reverse proxies may filter the "crumb"
parameter, resulting in failures when trying to use certain actions.
Daniel Beck
added a comment - - edited Would this be sufficient?
Some Jenkins features (like the REST API) are more difficult to use when this
option is enabled. Some features, especially in plugins not tested with this
option enabled, may not work at all. Some reverse proxies may filter the "crumb"
parameter, resulting in failures when trying to use certain actions.
SCM/JIRA link daemon
added a comment - Code changed in jenkins
User: Daniel Beck
Path:
core/src/main/resources/hudson/security/csrf/GlobalCrumbIssuerConfiguration/help-csrf.html
http://jenkins-ci.org/commit/jenkins/16509dc22c7129f64c6c2668779b71de819912cf
Log:
[FIXED JENKINS-15252] Explain problems with CSRF protection
Would this be sufficient?