Catalog UI Policy Rules

1 min read

The below table shows the list of ServiceNow Catalog UI policy rules that are checked by Quality Clouds.

Description	Severity	Area of impact
Possible use of private data – Catalog UI Policy scriptFalse	Warning	Security
Possible use of private data – Catalog UI Policy scriptTrue	Warning	Security
JavaScript – Avoid use of Function Constructors – Catalog UI Policy scriptFalse	High	Security
JavaScript – Avoid use of Function Constructors – Catalog UI Policy scriptTrue	High	Security
JavaScript – Avoid making connections on unsafe protocols – Catalog UI Policy scriptFalse	Warning	Security
JavaScript – Avoid making connections on unsafe protocols – Catalog UI Policy scriptTrue	Warning	Security
JavaScript – Optimize Loops – Catalog UI Policy scriptFalse	Warning	Performance
JavaScript – Optimize Loops – Catalog UI Policy scriptTrue	Warning	Performance
JavaScript – Avoid unrestricted targetOrigin on cross-domain messaging – Catalog UI Policy scriptFalse	High	Security
JavaScript – Avoid unrestricted targetOrigin on cross-domain messaging – Catalog UI Policy scriptTrue	High	Security
JavaScript – Avoid use of debugger statements – Catalog UI Policy scriptFalse	High	Security
JavaScript – Avoid use of debugger statements – Catalog UI Policy scriptTrue	High	Security
JavaScript – Avoid use of WebDB – Catalog UI Policy scriptFalse	High	Security
JavaScript – Avoid use of WebDB – Catalog UI Policy scriptTrue	High	Security
JavaScript – Use === comparison – Catalog UI Policy scriptFalse	Warning	Manageability
JavaScript – Use === comparison – Catalog UI Policy scriptTrue	Warning	Manageability
Synchronous AJAX call in Catalog UI Policies – scriptFalse	High	Performance
Synchronous AJAX call in Catalog UI Policies – scriptTrue	High	Performance
Catalog UI Policies using GlideRecord – scriptFalse	High	Performance
Catalog UI Policies using GlideRecord – scriptTrue	High	Performance
Catalog UI Policies with hard-coded sys_ids – scriptFalse	Medium	Manageability
Catalog Policies with hard-coded sys_ids – scriptTrue	Medium	Manageability
Document Object Model (DOM) manipulation in Catalog UI Policies – scriptFalse	High	Manageability
Document Object Model (DOM) manipulation in Catalog UI Policies – scriptTrue		Manageability
Modified Out of the Box Element	Warning	Scalability
Dot walking to sys_id – Catalog UI Policy scriptTrue	Medium	Performance
Dot walking to sys_id – Catalog UI Policy scriptFalse	Medium	Performance
Usage of g_form.setValue on a reference field without displayValue – Catalog UI Policy scriptTrue	High	Performance
Usage of g_form.setValue on a reference field without displayValue – Catalog UI Policy scriptFalse	High	Performance

Updated on March 21, 2025

Was it helpful ?