---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security
Release :
- brazil
ft:locale :
- en-US
ft:publication_title :
- Brazil Platform security
ft:clusterId :
- psec
bundleId :
- psec
workflow :
- Platform
---
# Enable synchronous mode for static analysis
# Enable synchronous mode for static analysis {#ariaid-title1}
Release version: Brazil
Updated September 10, 2026
 1 minute to read
The com.glide.script.static_analysis.enable_sync property controls whether static analysis security violations block script execution synchronously or are recorded asynchronously. Setting this property to
true enables synchronous mode, which blocks scripts with security violations.
When set to false (the default), violations are recorded asynchronously through statistical logs without preventing script execution. When set to true, security violations block script
execution with a `SecurityException`. Asynchronous mode (false) is for environments where availability is prioritized. Synchronous mode ( true) is better for high-security
environments where blocking malicious scripts is more important than performance.
To configure this property:
* Navigate to /sys_properties_list.do on the ServiceNow instance.
* Ensure the property com.glide.script.static_analysis.enable_sync exists and is set to true.
## More information {#sc-enable-synchronous-mode-for-static-analysis__section_qht_fk5_dkc}
{#sc-enable-synchronous-mode-for-static-analysis__table_ajc_y23_3ik__entry__2}
| Attribute | Description |
|-|-|
| Configuration name | com.glide.script.static_analysis.enable_sync |
| Configuration type | System Properties ( /sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | false |
| Fallback value | false |
| Category | [Malicious code](https://www.servicenow.com/docs/K1DqQQ9~Zs_MfYpJc8oc5w "The Malicious Code category ensures that best efforts are made to confirm that your code is free of vulnerabilities and unwanted functionality.") |
| Security risk | * Severity score: 6.8 * CVSS rating: Medium * Security risk details: Setting the com.glide.script.static_analysis.enable_sync property to false weakens protection against sandbox escape attempts that the static analyzer would otherwise detect when availability or performance is prioritized over security. {#sc-enable-synchronous-mode-for-static-analysis__ul_g1g_3sf_xwb} |
| Functional impact | This property determines if static analysis security violations block script execution. The default value of false records the violation but does not prevent the script execution. Impact of enabling sync mode (false → true): * Every sandbox script execution includes inline static analysis * Scripts with security violations fail with SecurityException * A small amount of latency added to script execution (ranging from microseconds to milliseconds depending on script size) * Violations are persisted to the Error log table Regression testing: * Run load tests to measure performance impact on script-heavy operations * Execute critical business rules, script includes, and background scripts * Check error log (System Log → Errors) for SecurityException records * Monitor response times for pages/APIs that execute sandbox scripts * Review statistics logs for latency percentiles (histogram50ns, histogram90ns, histogram99ns) * Identify any false positives that block legitimate scripts * Test under peak load conditions to ensure acceptable performance |
| Dependencies and prerequisites | The property com.glide.script.static_analysis.disabled must be set to false for the com.glide.script.static_analysis.enable_sync property to have any effect. |
[ ]
{#sc-enable-synchronous-mode-for-static-analysis__table_ajc_y23_3ik}