Disable external content url

  • Release version: Washingtondc
  • Updated February 1, 2024
  • 1 minute to read

    • Manage how external link metadata is used in your instance with Connect Chat.

    Use the glide.ui.url.external.content property to manage external link metadata in your instance. If the property is set to the recommended value of false, then no external link metadata will be rendered. If set to true then Connect Chat will retrieve external link metadata from sources such as YouTube or news articles to render richer messages. This could lead to Server Side Request Forgery (SSRF) attacks.

    More information

    Attribute Description
    Configuration name glide.ui.url.external.content
    Configuration type System Properties (/sys_properties_list.do)
    Data type boolean
    Recommended value false
    Default value true
    Category Validation, sanitization, and encoding
    Security risk
    • Severity score: 8.1
    • CVSS score: High
    • Security risk details: Setting this property to true could expose your instance to Server Side Request Forgery (SSRF) attacks.
    Dependencies and prerequisites None
    References Connect Chat