Sanitize All Translated HTML Fields
Learn how to configure the glide.translated_html.sanitize_all_fields property to the secure value to ensure that all translated_html elements are sanitized with an HTML sanitizer.
When the glide.translated_html.sanitize_all_fields system property is set to the value true, all translated_html elements will be sanitized using an HTML sanitizer. When the property is set to false, an element will only be sanitized if a dictionary attribute, html_sanitize, is set to true.
Ensure that the Glide Property glide.translated_html.sanitize_all_fields is set to the value true.
More information
| Attribute | Description |
|---|---|
| Configuration name | glide.translated_html.sanitize_all_fields |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | Validation, sanitization, and encoding |
| Security risk | - Severity score: 4.6 - CVSS score: Medium - Security risk details: Sanitizing HTML elements is best practice to ensure an attacker cannot embed malicious content that may lead to Cross Site Scripting \(XSS\) attacks. |
| Dependencies and prerequisites | None |
| Functional impact | Allows customers to access any table information if the widget is set to public and included in the property's value. |
Parent Topic:Validation, sanitization, and encoding