Follow-up from "Skip CSRF protection in Generic Alerts Endpoint"

The following discussion from !17692 (merged) should be addressed:

• @splattael started a discussion: (+2 comments)

  Would utilizing :allow_forgery_protection also work? 🤔