"Specify Download" property in Instance Security Dashboard

[anubhavkapoor76]

Hey Folks,

I have an unusual situation where we are trying to restrict download the file types in ServiceNow instance by means of "Instance security dashboard"

So i have specified the file types under system property 'glide.ui.strict_customer_uploaded_content_types' like doc,docx,xls, and xlsx and I want only these types of files to be downloaded in the instance.

However I can download type 'txt' also!! 

KB for Security Hardening Document: KB0550654 (Section 6.3)

Also read standard docs from :General Security Settings and in this obviously 'glide.ui.strict_customer_uploaded_static_content' is not visible in Instance.

I have tried this in Personal Instance too!!

Cheers!!

Anubhav

[Jeff Currier]

Did you get any help on your incident?  The Community might like to know the result/fix/resolution.

[anubhavkapoor76]

Hi JeffCsn,

The issue is still pending in Hi Portal. Will post the solution once done in this post.

Cheers!!

Anubhav

[simongilding]

Hi. Have you received any updates on this one yet? Thx.

[chrisayres]

Jeff, I have a customer who has flagged this and I want to know if this has been resolved.

[Jon Williams · Accepted solution]

Hi Anubhav,

I believe I have the answer to your question. The "glide.ui.strict_customer_uploaded_static_content" property is likely not set up properly as JeffCsn stated.

This property turns on the ability to restrict the types of files that can be downloaded when they have been uploaded using the "Upload File" functionality of the platform, and it is used in conjunction with "glide.ui.strict_customer_uploaded_content_types". 

When the "glide.ui.strict_customer_uploaded_static_content_types" parameter is configured with a list of comma delimited file types, then these will be the only file types that can be downloaded as static content from an instance.

The "glide.ui.strict_customer_uploaded_static_content" property is configured in the Security section of System Properties.

1. Start by navigating to "System Properties" > "Security".

2. In the "Security" page scroll down to the section "Attachment limits and behavior". In this section you'll find the area where you can configure the "glide.ui.strict_customer_uploaded_static_content" property by specifying the type of file extensions that can be downloaded. 

Let me know if this helps, hopefully it's what you need to get it working!

Thank you,

Jon Williams