Sanitize All Translated HTML Fields

Learn how to configure the glide.translated_html.sanitize_all_fields property to the secure value to ensure that all translated_html elements are sanitized with an HTML sanitizer.

When the glide.translated_html.sanitize_all_fields system property is set to the value true, all translated_html elements will be sanitized using an HTML sanitizer. When the property is set to false, an element will only be sanitized if a dictionary attribute, html_sanitize, is set to true.

Ensure that the Glide Property glide.translated_html.sanitize_all_fields is set to the value true.

More information

<table id=“table_ajc_b43_3kb”><thead><tr><th>

Attribute

</th><th>

Description

</th></tr></thead><tbody><tr><td>

Configuration name

</td><td>

glide.translated_html.sanitize_all_fields

</td></tr><tr><td>

Configuration type

</td><td>

System Properties (/sys_properties_list.do)

</td></tr><tr><td>

Data type

</td><td>

Boolean

</td></tr><tr><td>

Recommended value

</td><td>

true

</td></tr><tr><td>

Default value

</td><td>

<none>

</td></tr><tr><td>

Fallback value

</td><td>

false

</td></tr><tr><td>

Category

</td><td>

Validation, sanitization, and encoding

</td></tr><tr><td>

Security risk

</td><td>

• Severity score: 4.6

• CVSS score: Medium

• Security risk details: Sanitizing HTML elements is best practice to ensure an attacker cannot embed malicious content that may lead to Cross Site Scripting (XSS) attacks.

</td></tr><tr><td>

Dependencies and prerequisites

</td><td>

None

</td></tr><tr><td>

Functional impact

</td><td>

Allows customers to access any table information if the widget is set to public and included in the property’s value.

</td></tr></tbody> </table>Parent Topic:Validation, sanitization, and encoding