---
sourceDocument: Australia Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/australia/platform-security

 Release :

    - australia

ft:locale :

    - en-US

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce strict security of session cookies

# Enforce strict security of session cookies {#ariaid-title1}

Release version: Australia  
Updated March 12, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.ui.secure_cookies property to require properly formatted cookies
If glide.ui.secure_cookies isn't set to the recommended value of true, then additional cookie security and strict cookie validation isn't performed.

Ensure that the property glide.ui.secure_cookies is set to true.  
Warning:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc-secure-session-cookies__section_wc1_cqn_phc}

{#sc-secure-session-cookies__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.ui.secure_cookies |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | \<none\> |
| Fallback value | true |
| Category | [Validation, sanitization, and encoding](https://www.servicenow.com/docs/qvFon3mPY~i4OtLtQVS_QQ "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Security risk | * Severity score: 7.1 * CVSS rating: High * Security risk details: This could allow an attacker to bypass cookie validation leading to unauthorized resource access. {#sc-secure-session-cookies__ul_g1g_3sf_xwb} |
| Functional impact | When the property is set to true, improperly formatted cookies are rejected. When such a cookie is rejected, the user must login again. |
| Dependencies and prerequisites | None |
[ ]

{#sc-secure-session-cookies__table_ajc_b43_3kb}