FORMS

FIELD DESCRIPTION TYPE DEFAULT VALUE(S) ALLOWED VALUE(S)
enabled whether this part of the policy will be enforced Boolean true true, false
compensatingControl whether there’s another mechanism to handle this (elsewhere) in the stack Boolean false true, false
config all available form protection values
autocompleteAllowed sets the “autocomplete” setting in the form on or off Boolean false true, false (false = “off”)
acceptJsonContent accept form responses as JSON Boolean true true, false
allowMethodOverride allow form methods other than “get” or “post” Boolean false true, false