Property reference

`com.glide.cs.html.sanitizer.enabled`

The com.glide.cs.html.sanitizer.enabled property enables the HTML sanitizer service within the Virtual Agent. Setting this property to true helps prevent stored Cross-Site Scripting (XSS) attacks, ensuring safer interactions in the web client.

Default: Not stated
Type: Not stated
Application: Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property controls whether the HTML sanitizer service is active, which removes potentially harmful HTML elements and attributes from user input.
What area does it affect?	Virtual Agent security
What does the default mean?	No default value is stated in the ServiceNow documentation.
When should you review it?	Review this property when configuring security settings for user interactions in the Virtual Agent.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`com.glide.cs.html.sanitizer.enabled`
Type	Not stated
Application	Not stated
Default value	Not stated
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... For examples of adding markup items to the exclusion or inclusion lists, see Configure HTML sanitizer . To disable the HTML sanitizer script only for Virtual Agent conversations, add the com.glide.cs.html.sanitizer.enabled system property and set the value to false. For details about creating a system property, see Add a system property . © 2026 ServiceNow, Inc. All rights reserved. ServiceNow, the ...

Brazil docs View supporting context

Context preview Snippet 2

... of days increases the exposure period for token reuse. Enable HTML sanitizer within Virtual Agent • Description ◦(Old‎ <blank> ◦(New‎ This property controls the whether the HtmlSanitizerService is enabled. If "com.glide.cs.html.sanitizer.enabled" is not set to "true", then a Stored Cross-Site Scripting (XSS‎ attack is possible in the VA web client. • Security Risk ◦(Old‎ <blank> ◦(New‎ An XSS vulnerability can facilitate ...

More in `com.glide`

Other properties in the same namespace.

com.glide.cs.general.welcome_message This property sets the initial greeting message for users interacting with the Virtual Agent, allowing for cus com.glide.cs.global_configuration It provides the sys_id for the default configuration page, allowing for easy reference and recreation if neces com.glide.cs.guest_session_cookie_max_age This property defines the lifespan of the guest session cookie, influencing how long a guest user remains auth com.glide.cs.guest_session_resumable This property determines whether guest chat sessions can be resumed after being interrupted, enhancing user ex com.glide.cs.html_output_max_transcript_length It limits the number of characters displayed in HTML outputs for virtual agent conversation transcripts, affec com.glide.cs.idle_actionable_notification_timer This property sets the lifespan of actionable notifications to 8 hours by default, influencing how long users com.glide.cs.idle_chat_cancel_timeout This property defines the timeout period for canceling idle chats, ensuring that chats do not remain open inde com.glide.cs.idle_chat_reminder_message This property specifies the timeout reminder message displayed to users in chat sessions, helping to maintain

All 831 properties in com.glide →