---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enforce relative links

# Enforce relative links {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.cms.catalog_uri_relative property to enforce relative links from the URI parameter on `/ess/catalog.do`.
The glide.cms.catalog_uri_relative system property enforces relative links from the URI parameter on /ess/catalog.do. If glide.cms.catalog_uri_relative is not set to the recommended
value of true, then the URL isn't sanitized with the enforceRelativeURL(url) function.  
Note:  
This property impacts the legacy Content Management System (CMS) which has been replaced with Service Portal.

Ensure that the property glide.cms.catalog_uri_relative is set to true.

## More information {#sc-enforce-relative-links__section_wc1_cqn_phc}

{#sc-enforce-relative-links__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.cms.catalog_uri_relative |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | false |
| Category | [Validation, sanitization, and encoding](https://www.servicenow.com/docs/Y54hkYpvZcFtgJ5PMM2JEw "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Security risk | * Severity score: 2.6 * CVSS rating: Low * Security risk details: Absolute URLs can pose a security risk when used as a part of parameter or a field value, thus redirecting the source page to an adversary-controlled website. {#sc-enforce-relative-links__ul_g1g_3sf_xwb} |
| Functional impact | This remediation enforces validation on the catalog page such that only relative URLs are permitted. Existing links to external web applications will be broken. |
| Dependencies and prerequisites | None |
[ ]

{#sc-enforce-relative-links__table_ajc_b43_3kb}