Embedded Video in KB article using URL doesnot work

[Mahesh]

We are facing the issue in our instance in Madrid Version whenever we are embedding code in KB article using URL or embedded code it gets disabled whenever KB article is saved. We have checked the system property "glide.html.sanitize_all_fields" and make the Value as False then it works but WHEN we are capturing the body of email into Additional Comments field. It has been observed that content in the body of the email is either not getting displayed or getting unformatted(HTML tags are getting displayed instead of actual content) in the ticket. It is affecting when we make the property value as False and when we make it as True then embedded video code disappers.

Customer want both the functionality should work without any issue can someone has any idea or solution to fix this.

[Rajesh Kannan G]

Hi Mahesh,

HTML Sanitizer protects your instance against security concerns such as cross-site scripting, etc. It is not encouraged to disable it by making the property false.

You have two options,

• You can configure HTML Sanitizer to whitelist the required tags and attributes. Refer https://docs.servicenow.com/bundle/orlando-platform-administration/page/administer/security/task/t_C... for detailed instructions.
• You can disable HTML Sanitizer for specific fields like kb_knowledge.text, though it is still a concern the attack surface is just limited to article text field. Refer https://docs.servicenow.com/bundle/orlando-platform-administration/page/administer/security/task/t_E... for detailed instructions

Mark as Correct Answer & Helpful if this solves your issue or Helpful if this is useful to you.

Regards,

Rajesh

[Miguel Donayre]

Follow these steps - 

Go to the script include table and search for HTMLSanitizerConfig - https://docs.servicenow.com/bundle/orlando-platform-administration/page/use/using-forms/task/t_Embed...

Open the script - after line 15 copy and paste these lines of code - just like the picture below

  embed:{attribute:["src","type","allowfullscreen","allowscriptacces","plugnspage"]},
    object:{attribute:["classid","codebase"]},
    param:{attribute:["name","value"]}

The 2nd option is to set and attribute to false-

you first have to right-click the description in the knowledge article item to open the context menu -Click on "configure Dictionary"

on the bottom of that new page, there is a tab called attributes - you should see a new option - click it

now make sure it looks like the picture - once it does click save

(both steps) now type in sys_properties.list in the navigation menu search bar - 

now search for this property - "glide.ui.html.editor.extended_valid_elements" property

keep searching it doesn't always popup so try glide.ui.html and look or it on the list -

open it and add this to the value section and save

a[onclick|href|target|rel|media|hreflang|type|charset|name|rev|shape|coords|download|id|accesskey|class|dir|lang|style|tabindex|title]

now go back to the knowledge article and insert the video back in. and it should work