Sanitize All Translated HTML Fields

reference australia Updated Sep 10, 2026 1 min read sc-sanitize-all-translated-html-fields.md
Raw file servicenow.com

Learn how to configure the glide.translated_html.sanitize_all_fields property to the secure value to ensure that all translated_html elements are sanitized with an HTML sanitizer.

When the glide.translated_html.sanitize_all_fields system property is set to the value true, all translated_html elements will be sanitized using an HTML sanitizer. When the property is set to false, an element will only be sanitized if a dictionary attribute, html_sanitize, is set to true.

Ensure that the Glide Property glide.translated_html.sanitize_all_fields is set to the value true.

More information

Attribute

Description

Configuration name

glide.translated_html.sanitize_all_fields

Configuration type

System Properties (/sys_properties_list.do)

Data type

Boolean

Recommended value

true

Default value

true

Fallback value

false

Category

Validation, sanitization, and encoding

Security risk

  • Severity score: 4.6
  • CVSS score: Medium
  • Security risk details: Sanitizing HTML elements is a general guideline to ensure an attacker can't embed malicious content that may lead to Cross Site Scripting (XSS) attacks.

Dependencies and prerequisites

None

Functional impact

Allows users to access any table information if the widget is set to public and included in the property's value.

**Parent Topic:**[Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md)
Search documentation
Search document titles and file paths on the australia branch