Hi,
We have a related link to attach KB article to an incident. Whenever I am attaching any Kb article through that related link, whole content of that particular KB article is getting copied in the additional comments of the incident.
The requirement is to copy link of that KB article instead of the content. please help.
is it a static KB , how do you decide which KB to be attached on click on ''attach KB'' From realted links ? by the way its a risk to cross site script attack...
(recommend not to go with this approch... try to educate the client to look for alternative way by just entering the KB number)
The glide.ui.security.allow_codetag property disables support for embedding HTML code by using the [code] tag. ServiceNow mitigates many injection and cross-site attacks by implementing escaping and encoding techniques. As a result, users cannot write/submit HTML formatted inputs for journal fields. But, journal fields have the ability to render text enclosed within code tags as HTML.
There is an associated security risk. If the glide.ui.security.allow_codetag property is set to true, any malicious user can write harmful HTML JS code that may be executed on a different client browser after the journal fields are rendered.
ServiceNow Security recommends setting this property to false so that administrators can prevent journal fields from rendering HTML code by disabling support for the [code] tag.
☑️ Please mark responses as HELPFUL or ACCEPT SOLUTION to assist future users in finding the right solution....
