Escape xml response

  • Rversion finale: Australia
  • Mis à jour 12 mars 2026
  • 1 minute de lecture
  • Manage how XML escapes are handled on your instance.

    Use this property to manage if XML responses are escaped. If the property is set to the recommended value of false, then XML responses will not be escaped which can lead to XML injection attack. The injection of unintended XML content into an XML message can alter the intended logic of an application.

    More information

    Attribute Description
    Configuration name glide.soaprequest.unescape_xml_response
    Configuration type System Properties (/sys_properties_list.do)
    Data type Boolean
    Recommended value false
    Default value false
    Category Validation, sanitization, and encoding
    Security risk
    • Severity score: 6.4
    • CVSS score: Medium
    • Security risk details: Setting this property to false disables XML escaping, which could lead to XML injection attack.
    Dependencies and prerequisites None