Property reference

glide.xml.entity.whitelist.enabled

The glide.xml.entity.whitelist.enabled property prevents your instance from processing XML external entities from untrusted sources. This setting is crucial for protecting against XML external entity (XXE) attacks, which can compromise system security.

Default
Not stated
Type
Not stated
Application
Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do? It enables the restriction of XML external entities, ensuring that only trusted sources defined in the glide.xml.entity.whitelist property are processed.
What area does it affect? XML processing security
What does the default mean? No default value is stated in the ServiceNow documentation.
When should you review it? Review this property when configuring security settings or after a security audit.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name glide.xml.entity.whitelist.enabled
Type Not stated
Application Not stated
Default value Not stated
Description Not stated

Sources

Official references and nearby text excerpts where this property appears.

Context preview Snippet 1
... Boolean • Out of Box Value ◦(Old‎ <blank> ◦(New‎ true Rule Script (New‎ Script updated to improve detection accuracy. Restrict XML external entities • Description ◦(Old‎ <blank> ◦(New‎ Use the glide.xml.entity.whitelist.enabled and glide.xml.entity.whitelist system properties to prevent your instance from processing XML external entities from untrusted sources. XML external entity (XXE‎ attacks occur when a malicious actor modifies incoming XML to ...

More in glide (other)

Other properties in the same namespace.

All 457 properties in glide (other) →