Using JavaScript Content Access Control

If you're an upgraded customer, you can use JavaScript Content Access Control to modify the list of blocked third-party JavaScript URLs within your instance.

Before you begin

If you're an upgraded customer, you have read and write access to the table.

If you're a new customer, all records are hidden. Contact ServiceNow® Support for assistance.

Role required: admin

Procedure

1. In the application navigator, search for sys_js_content_provider_rule.list.
2. Click New.
3. On the form, fill in the fields.

   Table 1. JavaScript Content Provider Rule

   Field	Description
   Active	Option that when selected, the rule becomes active. When cleared, if no other rules match, the Path URL is admitted.
   Path	Absolute URL to a JavaScript file. Note: Every path has four variations. For example, the path /scripts/lib/jquery/jquery-1.8.2.min.js blocks the following URLs: /scripts/lib/jquery/jquery-1.8.2.min.js /scripts/lib/jquery/jquery-1.8.2.min.jsx /lib/jquery/jquery-1.8.2.min.js /lib/jquery/jquery-1.8.2.min.jsx
   Action	Option to Deny: The server returns a 404 Not Found response for the Path URL or any of its variations. Allow: The server returns the contents of the file for the Path URL or any of its variations. Redirect: The server returns the contents of an alternate file as specified in the Redirect Path field.
   Application	Option that specifies the scope of the rule. Global is the default. Note: This functionality is not scope/application or domain dependent.
   Redirect path	Field that clarifies the path to redirect to. When Action is set to Redirect, a request for the Path URL is served the contents from this URL instead.

4. Click Submit.