How we can test : Disabling SQL error messages (instance security hardening)

Jaydeep Parmar1
Tera Contributor

Hi,

As part of Instance Hardening, ServiceNow is recommended to disable the below property. But I'm not able to find any use case or test case scenario to check the impact on the instance after disabling it. If anyone can help me with how to test the below properties.

:Disabling SQL error messages(glide.db.loguser) -->set to False from True

2 REPLIES 2

Aman Kumar S
Kilo Patron

Use the glide.db.loguser property to disable SQL error messages from rendering in a browser.

If you set the value as true, it will show the error which basically means, any database error message won't be shown to user in the browser, although they will be still logged in "syslog" table.

For testing, add current.update() in your udpate BR, set the value of prop as true and false and observe the form upon update

 

Feel free to mark correct, If I answered your query.

Will be helpful for future visitors looking for similar questions 🙂

Best Regards
Aman Kumar

Can you please be more specific with the test with the Business Rule to test the disabling of SQL error messages?

Thanks.