Property reference

`glide.script.ccsi.customer_scoped.security_msgs_enabled`

The glide.script.ccsi.customer_scoped.security_msgs_enabled property controls the display of security recommendation messages for Glide AJAX enabled script includes. Admins should review this setting to ensure they receive important security guidance when creating customer applications.

Default: Not stated
Type: Not stated
Application: Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	It enables or disables security recommendation messages related to Glide AJAX enabled script includes, with the default setting allowing these messages to be displayed.
What area does it affect?	Script Includes Security
What does the default mean?	No default value is stated in the ServiceNow documentation.
When should you review it?	Review this property when configuring security settings for customer applications.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`glide.script.ccsi.customer_scoped.security_msgs_enabled`
Type	Not stated
Application	Not stated
Default value	Not stated
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... include has public access. • Use GlideRecordSecure instead of GlideRecord API for better security, if the script queries the database. Note: To disable the security recommendation messages, set the property glide.script.ccsi.customer_scoped.security_msgs_enabled to false in the sys_properties table. The default value is set to true. See Instance Security Hardening Settings for additional information on security compliance. © 2026 ServiceNow, Inc. All rights ...

More in `glide.script`

Other properties in the same namespace.

glide.script.allow.ajaxevaluate This property controls whether the AJAXEvaluate processor is enabled, affecting how scripts can be executed in glide.script.block.client.globals This property controls whether strict mode is enforced for new globally scoped client scripts, impacting their glide.script.ccsi.ispublic This property restricts client-callable script includes from being executed by non-logged-in users, thereby pr glide.script.dot_walk.add_attribute_on_table_create This property adds an attribute to new tables that enforces cross-scope access checks when dot-walking using r glide.script.dot_walk.enforce_cross_scope_access_all_tables This property determines whether authorization checks are enforced for all cross-scope table data accesses thr glide.script.dot_walk.exempt_script_sources This property allows specified script sources to bypass scoping checks while performing dot-walking, facilitat glide.script.dot_walk.log_and_allow_violations This property enables logging of access violations when dot-walk is used to access tables across application s glide.script.enforce_scope_checks_on_get_ref_record This property enforces or bypasses access checks when retrieving reference records across different scopes in

All 14 properties in glide.script →