Enforce HTML Sanitization

  • Release version: Australia
  • Updated March 12, 2026
  • 1 minute to read
  • Use the com.glide.security.check_unsanitized_html property to enforce sanitization behavior of translated_html fields on a global level for field assignments.

    The com.glide.security.check_unsanitized_html system property enforces sanitization behavior of translated_html fields on a global level for field assignments.

    Ensure that the property com.glide.security.check_unsanitized_html is set to enforce.

    Warning:
    This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

    More information

    Attribute Description
    Configuration name com.glide.security.check_unsanitized_html
    Configuration type System Properties (/sys_properties_list.do)
    Data type String
    Recommended value enforce
    Default value <none>
    Fallback value log_only
    Category Validation, sanitization, and encoding
    Security risk
    • Severity score: 7.3
    • CVSS rating: High
    • Security risk details: An attacker could be able to execute arbitrary javascript in the victim's browser (XSS attacks).
    Functional impact None
    Dependencies and prerequisites None