glide.xml.entity.whitelist.enabled not able to disable
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-20-2018 07:30 PM
While testing glide.xml.entity.whitelist.enabled we are not able to disable this setting to conduct further tests. Any attempts to set this to "false" fails with error "Not allowing set of unsafe property value: glide.xml.entity.whitelist.enabled=false"
Attempts to delete this in sys_properties does not revert this to pre settings. Any ideas on how we can turn this off?
- Labels:
-
Platform and Cloud Security

- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-20-2018 08:29 PM
There's a few properties like that.
https://hi.service-now.com/kb_view.do?sysparm_article=KB0550654
is the hardening guide and talks about that property. Have you tried toggling the properties around id?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
12-20-2018 09:24 PM
Hi jacebenson,
I've tried setting it to "false" and also deleting it altogether after setting it to "false" ends up with no changes and error "Not allowing set of unsafe property value: glide.xml.entity.whitelist.enabled=false".
The doc only mentions turning it on but no mention of reverting this to OOB.