---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enable static analysis

# Enable static analysis {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Enable static analysis to provide compile-time security checks for JavaScript code in the scripting sandbox.
When this property is set to <kbd class="ph userinput">false</kbd>, static analysis is enabled and provides compile-time security analysis. When set to <kbd class="ph userinput">true</kbd>, all static analysis security checks are bypassed.
This feature allows you to rapidly respond to JavaScript sandbox security exploits.

to configure this property:

1. Navigate to /sys_properties_list.do on the ServiceNow instance.
2. Ensure the com.glide.script.static_analysis.disabled either doesn't exist or is set to <kbd class="ph userinput">false</kbd>.
{#sc-enable-static-analysis__ol_ivh_5fd_2kc}

## More information {#sc-enable-static-analysis__section_pf2_vgd_2kc}

{#sc-enable-static-analysis__table_2lu_9jk_2ik__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | com.glide.script.static_analysis.disabled |
| Configuration type | System Properties ( /sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | false |
| Default value | false |
| Fallback value | false |
| Category | [Malicious code](https://www.servicenow.com/docs/K1DqQQ9~Zs_MfYpJc8oc5w "The Malicious Code category ensures that best efforts are made to confirm that your code is free of vulnerabilities and unwanted functionality.") |
| Security risk | * Severity score: 6.8 * CVSS rating: Medium * Security risk details: Disabling static analysis removes protections against sandbox escape attempts that the static analyzer would otherwise detect. While other runtime protections exist in the sandbox, disabling static analysis weakens the overall security posture. Sandbox escapes enables users to execute unauthorized and privileged script. {#sc-enable-static-analysis__ul_g1g_s56_xwb} |
| Functional impact | Depending on the configuration of additional properties, sandbox scripts which match static analysis rules are logged or blocked. |
| Dependencies and prerequisites | None |
[ ]

{#sc-enable-static-analysis__table_2lu_9jk_2ik}