Double check inbound transactions

reference australia Updated Sep 10, 2026 1 min read sc-double-check-inbound-transactions.md
Raw file servicenow.com

Use the glide.security.strict.updates property to enable double-checking of security on inbound transactions during form submission. When you set this property to true, it adds an extra layer of table validation before a form renders in the browser.

The glide.security.strict.updates system property provides an extra layer of security on form submission / field updates by ensuring only users with the proper permissions are allowed to update a form. If glide.security.strict.updates is not set to the recommended value of true, then updates are not strict meaning they are able to modify fields visible to them regardless of whether they have the appropriate permissions.

Ensure that the property glide.security.strict.updates exists in the System Properties [sys_properties] table and is set to "true".

Warning: This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

More information

Attribute

Description

Configuration name

glide.security.strict.updates

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

true

Fallback value

false

Category

Access control

Security risk

  • Severity score: 8.1
  • CVSS rating: High
  • Security risk details: Users may be able to update form fields simply by having visibility into them, regardless of their actual permissions, creating a risk of unauthorized data modification and privilege escalation.

Functional impact

None

Dependencies and prerequisites

None

To learn more about adding or creating a system property, see [Add a system property](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/platform-administration/t_AddAPropertyUsingSysPropsList.md).

Parent Topic:Access control

Search documentation
Search document titles and file paths on the australia branch