diff --git a/home/jobs/OMERO-web/config.xml b/home/jobs/OMERO-web/config.xml
index bcc6c06f..134d4e55 100644
--- a/home/jobs/OMERO-web/config.xml
+++ b/home/jobs/OMERO-web/config.xml
@@ -242,6 +242,9 @@ omero config set omero.web.public.url_filter '^/'
 omero config set omero.web.feedback.comment.enabled false
 omero config set omero.web.feedback.error.enabled false
 
+# CSRF 
+# omero config set omero.web.csrf_trusted_origins '["https://YOURSERVER"]'
+
 BUILD_ID=DONT_KILL_ME omero web start
 omero web diagnostics