Hi everyone, In the Streamlit forum there are many examples of users adjusting enableCORS and enableXsrfProtection in their config.toml, but some of us don’t really understand these parameters :slight_smile: When should we adjust the values of enableCORS and enableXsrfProtection vs. leave them a…

Hey @marduk , turns out we had to do some reading ourselves on enableCORS and enableXsrfProtection. Here are two responses I received. Let me know if you have any follow up questions. Truthfully, CORS and Xsrf protection are very complex security policies that are difficult for most users. We enabl…

Hi @marduk , Really good question. I’d like to know the answer too to improve our documentation on config options. Give me until next week to get back to you? I’ll ping our Eng team internally for answers. :balloon:

Hi @snehankekre , Let us know when you have news on this :slight_smile: 100% agree that documentation for config options in general can be improved :rocket:

Hey @marduk So sorry for the delay :disappointed: Thanks again for resurfacing this thread. I’ve just posted your question to our internal support group. I’m waiting to hear back a response. Whenever I hear back, I’ll paste their response here verbatim.

Thanks a lot for sharing this @snehankekre , appreciate it :slight_smile:. (Also the info about the potential naming improvement :rocket::rocket:.)

When to use enableCORS and enableXsrfProtection parameters?

Using Streamlit

Topic		Replies	Views
Disabling CORS in Streamlit cloud deployment Community Cloud streamlit-cloud , discussion	2	932	December 14, 2024
How to use "enableXsrfProtection = false" Community Cloud	4	2380	October 17, 2023
Streamlit is NOT yet compatible with mobile dev WebViews Using Streamlit discussion	1	101	March 1, 2025
Pyinstaller streamlit http://localhost:3000 How to fix it? Using Streamlit session-state , pyinstaller , streamlit-cloud , discussion	2	225	June 28, 2025
Streamlit, CORS and xsrf problems (?) Using Streamlit discussion	1	558	February 9, 2025

When to use enableCORS and enableXsrfProtection parameters?

Related topics