Disable external content url [Updated in Security Center 2.0]

  • 릴리스 버전: Australia
  • 업데이트 날짜 2026년 03월 12일
  • 소요 시간: 2분

    • Manage how external link metadata is used in your instance with Connect Chat.

    Use the glide.ui.url.external.content property to manage external link metadata in your instance. If the property is set to the recommended value of false, then no external link metadata will be rendered. If set to true then Connect Chat will retrieve external link metadata from sources such as YouTube or news articles to render richer messages. This could lead to Server Side Request Forgery (SSRF) attacks.

    Ensure the Glide Property glide.ui.url.external.content exists and is set to the value false. If the property does not appear in the sys_properties table, add a new record.

    More information

    Attribute Description
    Configuration name glide.ui.url.external.content
    Configuration type System Properties (/sys_properties_list.do)
    Data type Boolean
    Recommended value false
    Default value true
    Category Validation, sanitization, and encoding
    Security risk
    • Severity score: 7.2
    • CVSS score: High
    • Security risk details: Setting this property to true could expose your instance to Server Side Request Forgery (SSRF) attacks.
    Dependencies and prerequisites None
    References Connect Chat