Enforce HTML Sanitization
Use the com.glide.security.check_unsanitized_html property to enforce sanitization behavior of translated_html fields on a global level for field assignments.
The com.glide.security.check_unsanitized_html system property enforces sanitization behavior of translated_html fields on a global level for field assignments.
Ensure that the property com.glide.security.check_unsanitized_html is set to enforce.
Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
More information
| Attribute | Description |
|---|---|
| Configuration name | com.glide.security.check_unsanitized_html |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | String |
| Recommended value | enforce |
| Default value | <none> |
| Fallback value | log\_only |
| Category | Validation, sanitization, and encoding |
| Security risk | - Severity score: 7.3 - CVSS rating: High - Security risk details: An attacker could be able to execute arbitrary javascript in the victim's browser \(XSS attacks\). |
| Functional impact | None |
| Dependencies and prerequisites | None |
Parent Topic:Validation, sanitization, and encoding