glide.http.headers_config.enabled The glide.http.headers_config.enabled property enables the configuration of HTTP response headers in ServiceNow. Setting this property to true helps mitigate security risks such as cookie/session hijacking and XSS vulnerabilities by ensuring that defined security headers are applied.
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property determines whether HTTP response header configurations are utilized, impacting security measures against various web vulnerabilities. |
|---|---|
| What area does it affect? | Security and session management |
| What does the default mean? | No default value is stated in the ServiceNow documentation. |
| When should you review it? | Review this property when configuring security settings or addressing potential vulnerabilities in web applications. |
Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.
| Property name | glide.http.headers_config.enabled |
|---|---|
| Type | Not stated |
| Application | Not stated |
| Default value | Not stated |
| Description | Not stated |
Official references and nearby text excerpts where this property appears.
glide.httpOther properties in the same namespace.
glide.http.async.io_thread_count
This property configures the number of IO threads available for asynchronous HTTP operations, impacting how ef
glide.http.cache_control
It specifies the Cache-Control directive to be included in HTTP responses, influencing client-side caching beh
glide.http.ecc.response_poller.loop_iteration.interval_ms
This property configures the interval at which the ECC Queue checks for responses, impacting the responsivenes
glide.http.expire.days
This property specifies the number of days before static content expires in HTTP responses, allowing for contr
glide.http.log_debug
This property allows the retrieval of all HTTP headers, including those set automatically by the system, when
glide.http.outbound.max_timeout
This property defines the maximum timeout duration for asynchronous API calls, capping it at 30 seconds unless
glide.http.outbound.max_timeout.enabled
This property enables or disables a hard maximum wait time for asynchronous API calls, impacting how long the
glide.http.response.get_body.limit
It limits the size of HTTP response bodies to mitigate risks of memory overflow and service disruption.