glide.ui.escape_text Escapes XML values at the UI parser level to help prevent reflected and stored cross-site scripting. With the default value true, values are encoded before reaching the browser; this protection does not apply in Service Portal.
trueThe answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property enables the escaping of XML values to mitigate cross-site scripting vulnerabilities within the user interface. |
|---|---|
| What area does it affect? | User Interface Security |
| What does the default mean? | The default value is "true", which means this behavior is enabled by default. |
| When should you review it? | Review this property when assessing application security measures or during security audits. |
Raw metadata from the property record.
| Property name | glide.ui.escape_text |
|---|---|
| Sys ID | a7e8db450a0a0b0a308ab5de09733d15 |
| Type | boolean |
| Application | Global |
| Default value | true |
| Description | Escape XML values at the parser level for the user interface. This will prevent reflected and stored cross site scripting attacks. |
| Updated | 2024-05-25 04:03:31 |
Official references and nearby text excerpts where this property appears.
glide.uiOther properties in the same namespace.
glide.ui.escape_form_message
When true, sanitizes strings in GlideForm functions to remove unwanted code; the default false value leaves th
glide.ui.escape_gwindow_message
When set to true, sanitizes strings in GlideWindow functions to remove unwanted code; when false, leaves them
glide.ui.escape_html_list_field
This property controls the escaping of HTML in list view fields, enhancing security by preventing script execu
glide.ui.escape_scratchpad
This property controls the escaping of string values in the scratchpad to enhance security against cross-site
glide.ui.experiment_activity.fields
This property defines which fields are included in the experiment activity formatter, impacting how experiment
glide.ui.export.choice_list_max_characters
Sets the maximum number of characters shown from condition fields in Microsoft Excel exports and the Core UI l
glide.ui.fd.excluded_types
It defines a list of field types that are excluded from the Form Designer, enhancing usability by limiting opt
glide.ui.fetch.list.record.count.asynchronously
This property configures the asynchronous loading of record counts for lists derived from large tables, enhanc