glide.xmlutil.max_entity_expansion The glide.xmlutil.max_entity_expansion property sets the maximum amount of entity expansion allowed within an XML parser. Setting this value to 3000 or less is crucial to prevent potential denial of service attacks on the GlideXMLUtil parsing scriptable.
The answers below summarize the purpose, scope, default effect, and review scenarios for this property.
| What does it do? | This property limits the entity expansion threshold in the XML parser to enhance security and mitigate denial of service vulnerabilities. |
|---|---|
| What area does it affect? | XML Parsing Security |
| What does the default mean? | No default value is stated in the ServiceNow documentation. |
| When should you review it? | Review this property during security audits or when configuring XML parsing settings. |
Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.
| Property name | glide.xmlutil.max_entity_expansion |
|---|---|
| Type | Not stated |
| Application | Not stated |
| Default value | Not stated |
| Description | Not stated |
Official references and nearby text excerpts where this property appears.
glide (other)Other properties in the same namespace.
glide.xmlhttp.ac_wait_time
This property configures the delay between keystrokes in dynamic drop-downs, impacting how quickly choices app
glide.xmlhttp.excessive
This property controls the limit on the number of items shown in the Available half of a collection box, impac
glide.xmlhttp.max_choices
This property limits the number of choices shown in dynamic drop-downs, enhancing user experience by preventin
glide.xmlhttp.secure.ajaxgliderecord
This property enables or disables secure AJAX calls for GlideRecord, enhancing data protection during interact
glide.active.session.timeout.exception.roles
It configures a comma-separated list of roles that are not subject to active session timeout limits, enhancing
glide.active.session.timeout.invalidate.session
This property controls whether timed-out integration sessions are invalidated immediately, reducing the risk o
glide.adaptive.auth.log.mfa.relax.event
This property enables logging of MFA relaxation events, allowing administrators to monitor when MFA enforcemen
glide.adaptive.auth.log.success.event
This property allows the logging of successful authentication events, which helps in tracking user access and