Key questions about this property
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? |
It enables the restriction of XML external entities, ensuring that only trusted sources defined in the glide.xml.entity.whitelist property are processed. |
| What area does it affect? |
XML processing security |
| What does the default mean? |
No default value is stated in the ServiceNow documentation. |
| When should you review it? |
Review this property when configuring security settings or after a security audit. |
Property record
Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.
| Property name |
glide.xml.entity.whitelist.enabled |
| Type |
Not stated |
| Application |
Not stated |
| Default value |
Not stated |
| Description |
Not stated |
Sources
Official references and nearby text excerpts where this property appears.
Context preview
Snippet 1
... Boolean • Out of Box Value ◦(Old <blank> ◦(New true Rule Script (New Script updated to improve detection accuracy. Restrict XML external entities • Description ◦(Old <blank> ◦(New Use the glide.xml.entity.whitelist.enabled and glide.xml.entity.whitelist system properties to prevent your instance from processing XML external entities from untrusted sources. XML external entity (XXE attacks occur when a malicious actor modifies incoming XML to ...
More in glide (other)
Other properties in the same namespace.
All 457 properties in glide (other) →