Property reference

`glide.attachment.enable_secure_filename_validation`

The glide.attachment.enable_secure_filename_validation property enforces strict validation of attachment file names to enhance security. Admins should care about this setting as it prevents potentially malicious file uploads that could exploit vulnerabilities in the system.

Default: Not stated
Type: Not stated
Application: Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property, when enabled, ensures that file names are fully sanitized and that unsafe patterns are rejected, preventing bypass of MIME-type restrictions.
What area does it affect?	File attachment security
What does the default mean?	No default value is stated in the ServiceNow documentation.
When should you review it?	Review this property when implementing file upload features or enhancing security measures.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`glide.attachment.enable_secure_filename_validation`
Type	Not stated
Application	Not stated
Default value	Not stated
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... vector graphics (SVG‎ files from accessing external scripts. Validate MIME type for multi-extension filenames and polyglot files Use a system property to prevent attachments from bypassing MIME-type restrictions. Use the glide.attachment.enable_secure_filename_validation system property to enable strict validation of attachment file names. When set to true, this property prevents attachments from bypassing MIME-type restrictions. The platform performs full file name sanitization and ...

More in `glide.attachment`

Other properties in the same namespace.

glide.attachment.blacklisted.extensions This property defines a list of file extensions that are prohibited for attachments in the system, impacting a glide.attachment.blacklisted.types This property defines a list of MIME types that are not allowed as attachments, helping to prevent the upload glide.attachment.enforce_security_validation It enforces validation of file MIME types during uploads to ensure that only files with correct extensions are glide.attachment.extensions This property defines a comma-separated list of allowable file extensions for document attachments, excluding glide.attachment.role This property defines a comma-separated list of roles that can create attachments, impacting user permissions glide.attachment.trusted_system_extensions It specifies which non-executable file extensions are permitted for backend attachments, overriding standard v

All 7 properties in glide.attachment →