Skip to content
Validation › sanitization › and encoding › Hardening settings › Platform Security
Release: Australia · Updated: 2026-03-12 · Official documentation · View source

Escape xml response

Manage how XML escapes are handled on your instance.

Use this property to manage if XML responses are escaped. If the property is set to the recommended value of false, then XML responses will not be escaped which can lead to XML injection attack. The injection of unintended XML content into an XML message can alter the intended logic of an application.

More information

AttributeDescription
Configuration nameglide.soaprequest.unescape_xml_response
Configuration typeSystem Properties \(/sys\_properties\_list.do\)
Data typeBoolean
Recommended valuefalse
Default valuefalse
CategoryValidation, sanitization, and encoding
Security risk
  • Severity score: 6.4
  • CVSS score: Medium
  • Security risk details: Setting this property to false disables XML escaping, which could lead to XML injection attack.
Dependencies and prerequisitesNone

Parent Topic:Validation, sanitization, and encoding