CSRF prevention option

Hey, is csrfPrevention option gone or is it enabled by default?
I am using apollo server 3.6.7 and it seems like it doesn’t accept this config option when creating a server instance. Thanks