# Forged-Request Rejection

> The ability to detect and reject requests that a user did not intentionally initiate.

Record: `lexicon:forged-request-rejection`
Kind: capability
Layer: [Security Core](https://banes-lab.com/records/layer/security-core.md)
Canonical: https://banes-lab.com/ontology/lexicon#lexicon-forged-request-rejection

Listed in [Lexicon terms](https://banes-lab.com/api/records/lexicon.md), after [Fine-Grained Access Control](https://banes-lab.com/records/lexicon/fine-grained-access-control.md) and before [Identity-Aware Authorization](https://banes-lab.com/records/lexicon/identity-aware-authorization.md).

## Category

- [Security Privacy Compliance](https://banes-lab.com/records/lexicon-category/security-privacy-compliance.md)

## Enabled by

- [CSRF Protection](https://banes-lab.com/records/architecture/csrf-protection.md)

## Linked from

- [Security / Privacy / Compliance / Governance](https://banes-lab.com/ontology/principles/architecture-category-security-privacy-compliance-governance.md)