"Specify Download" property in Instance Security Dashboard

anubhavkapoor76 · ‎10-11-2018

Hey Folks,

I have an unusual situation where we are trying to restrict download the file types in ServiceNow instance by means of "Instance security dashboard"

So i have specified the file types under system property 'glide.ui.strict_customer_uploaded_content_types' like doc,docx,xls, and xlsx and I want only these types of files to be downloaded in the instance.

However I can download type 'txt' also!!

KB for Security Hardening Document: KB0550654 (Section 6.3)

Also read standard docs from :General Security Settings and in this obviously 'glide.ui.strict_customer_uploaded_static_content' is not visible in Instance.

I have tried this in Personal Instance too!!

Cheers!!

Anubhav

Cheers!!
Anu

Conect me at LinkedIn

Jon Williams · ‎03-20-2019

Hi Anubhav,

I believe I have the answer to your question. The "glide.ui.strict_customer_uploaded_static_content" property is likely not set up properly as JeffCsn stated.

This property turns on the ability to restrict the types of files that can be downloaded when they have been uploaded using the "Upload File" functionality of the platform, and it is used in conjunction with "glide.ui.strict_customer_uploaded_content_types".

When the "glide.ui.strict_customer_uploaded_static_content_types" parameter is configured with a list of comma delimited file types, then these will be the only file types that can be downloaded as static content from an instance.

The "glide.ui.strict_customer_uploaded_static_content" property is configured in the Security section of System Properties.

1. Start by navigating to "System Properties" > "Security".

2. In the "Security" page scroll down to the section "Attachment limits and behavior". In this section you'll find the area where you can configure the "glide.ui.strict_customer_uploaded_static_content" property by specifying the type of file extensions that can be downloaded.

Let me know if this helps, hopefully it's what you need to get it working!

Thank you,

Jon Williams

View solution in original post

Jeff Currier · ‎10-11-2018

I tested this in my instance and I too can download txt files which are not included on the list. My thinking is that glide.ui.strict_customer_uploaded_static_content is not set, but I cannot find this property. You may need to create an incident in Hi.

anubhavkapoor76 · ‎10-11-2018

Thanks jeff. Yes i think this property resides in the Blackbox of Service Now. Will raise a Hi Ticket and respond back on this thread.

Thanks for checking!!

Cheers!!

Anubhav

Cheers!!
Anu

Conect me at LinkedIn

Jeff Currier · ‎10-11-2018

I had a thought I might need elevated privy to see it, but I elevated to security_admin, but still couldn't find it.

anubhavkapoor76 · ‎10-11-2018

Yup I checked on that too.

Cheers!!
Anu

Conect me at LinkedIn