---
sourceDocument: Brazil Platform security
sourceDocumentLink: https://www.servicenow.com/docs/r/platform-security

 Release :

    - brazil

ft:locale :

    - en-US

ft:publication_title :

    - Brazil Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Implement the x-frame-options: SAMEORIGIN security header

# Implement the x-frame-options: SAMEORIGIN security header {#ariaid-title1}

Release version: Brazil  
Updated September 10, 2026  
![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 minute to read  
Use the glide.set_x_frame_options property to set the X-Frame-Options response header to SAMEORIGIN for all UI pages.
The glide.set_x_frame_options system property controls the implementation of the security header X-Frame-Options: SAMEORIGIN. If glide.set_x_frame_options is not set to the recommended
value of true, then an instance will be allowed to be framed in an iframe of another page.

Ensure the property glide.set_x_frame_options is set to true.

## More information {#sc-x-frame-options-sameorigin__section_wc1_cqn_phc}

{#sc-x-frame-options-sameorigin__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.set_x_frame_options |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Fallback value | false |
| Category | [Configuration](https://www.servicenow.com/docs/6g9V8~pRg55o7Q9NVpD4uQ "The Configuration category ensures applications have a secure build environment and hardened third party library components. Specifically, ensuring a build and deploy pipeline is repeatable and includes automated testing and prevents known security issues from being deployed. This includes keeping dependencies up to date and free from known vulnerabilities.") |
| Security risk | * Severity score: 5.9 * CVSS rating: Medium * Security risk details: This can lead to a clickjacking attack. {#sc-x-frame-options-sameorigin__ul_g1g_3sf_xwb} |
| Functional impact | This remediation enforces the restriction for rendering a ServiceNow AI Platform application in a third-party application in the form of an iFrame. If you have such an integration, the application wouldn't render in the customized third-party app. |
| Dependencies and prerequisites | None |
[ ]

{#sc-x-frame-options-sameorigin__table_ajc_b43_3kb}