[JENKINS-15252] Why is "Prevent Cross Site Request Forgery exploits" disabled by default?

It's not clear why "Prevent Cross Site Request Forgery exploits" is disabled by default.
The help needs to explain the downside of enabling this feature, if any.

links to

PR 1438

cowwoc created issue - 2012-09-20 14:14

Jenkins IRC Bot made changes - 2014-09-27 15:41

Component/s		New: core [ 15593 ]
Component/s	Original: gui [ 15492 ]

Daniel Beck made changes - 2014-10-13 22:29

Assignee

New: Daniel Beck [ danielbeck ]

Daniel Beck made changes - 2014-10-13 22:30

Labels		New: documentation
Priority	Original: Major [ 3 ]	New: Minor [ 4 ]

Daniel Beck made changes - 2014-10-24 13:05

Status

Original: Open [ 1 ]

New: In Progress [ 3 ]

Daniel Beck made changes - 2014-10-24 13:05

Remote Link

New: This issue links to "PR 1438 (Web Link)" [ 11808 ]

SCM/JIRA link daemon made changes - 2014-10-27 05:02

Resolution		New: Fixed [ 1 ]
Status	Original: In Progress [ 3 ]	New: Resolved [ 5 ]

R. Tyler Croy made changes - 2016-07-25 23:55

Workflow

Original: JNJira [ 145974 ]

New: JNJira + In-Review [ 191721 ]

Jenkins