Property reference

glide.ui.security.codetag.allow_script

Disables JavaScript in HTML embedded with [code] tags when set to false. The default is false, which blocks script execution in rendered journal fields and forms and reduces cross-site scripting risk.

Default
false
Type
boolean
Application
Global

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? This property allows JavaScript to be included within embedded HTML code tags, affecting how content is rendered in the application.
What area does it affect? HTML rendering security
What does the default mean? The default value is "false", which means this behavior is disabled by default.
When should you review it? Review this property when implementing features that require JavaScript in embedded HTML.

Out of the box property record

Raw metadata from the property record.

Property name glide.ui.security.codetag.allow_script
Sys ID bfab06e40a0a0bad000348fafbba0453
Type boolean
Application Global
Default value false
Description Allow embedded HTML (using [code] tags) to contain Javascript tags
Updated 2024-05-25 03:56:49

Sources

Official references and nearby text excerpts where this property appears.

Context preview Snippet 1
... associated. 206 Documentation Updates ◦(Old‎ <blank> ◦(New‎ External users could unwillingly be given permissions to the CMDB model. Disable JavaScript tags in embedded HTML • Description ◦(Old‎ <blank> ◦(New‎ If "glide.ui.security.codetag.allow_script" is not set to the recommended value of "false", then this property allows rendered HTML in journal fields and forms which opens room for XSS attacks. Malicious HTML needs to ...

More in glide.ui

Other properties in the same namespace.

All 731 properties in glide.ui →