---
title: Catalog UI Policy Rules
description: "The below table shows the list of ServiceNow Catalog UI policy rules that are checked by Quality Clouds. | Description | Severity | Area of impact | | --- | --- | --- | | [Possible use of private data…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/by-configuration-element/catalog-ui-policy-rules/"
updated: "2025-03-21"
category: Rules for ServiceNow / By Configuration Element
---

# Catalog UI Policy Rules

The below table shows the list of ServiceNow Catalog UI policy rules that are checked by Quality Clouds.

| Description | Severity | Area of impact |
| --- | --- | --- |
| [Possible use of private data - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-use-of-private-data-catalog-ui-policy-scriptfalse/) | Warning | Security |
| [Possible use of private data - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-use-of-private-data-catalog-ui-policy-scripttrue/) | Warning | Security |
| [JavaScript - Avoid use of Function Constructors - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-function-constructors-catalog-ui-policy-scriptfalse/) | High | Security |
| [JavaScript - Avoid use of Function Constructors - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-function-constructors-catalog-ui-policy-scripttrue/) | High | Security |
| [JavaScript - Avoid making connections on unsafe protocols - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-making-connections-on-unsafe-protocols-catalog-ui-policy-scriptfalse/) | Warning | Security |
| [JavaScript - Avoid making connections on unsafe protocols - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-making-connections-on-unsafe-protocols-catalog-ui-policy-scripttrue/) | Warning | Security |
| [JavaScript - Optimize Loops - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-optimize-loops-catalog-ui-policy-scriptfalse/) | Warning | Performance |
| [JavaScript - Optimize Loops - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-optimize-loops-catalog-ui-policy-scripttrue/) | Warning | Performance |
| [JavaScript - Avoid unrestricted targetOrigin on cross-domain messaging - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-unrestricted-targetorigin-on-cross-domain-messaging-catalog-ui-policy-scriptfalse/) | High | Security |
| [JavaScript - Avoid unrestricted targetOrigin on cross-domain messaging - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-unrestricted-targetorigin-on-cross-domain-messaging-catalog-ui-policy-scripttrue/) | High | Security |
| [JavaScript - Avoid use of debugger statements - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-debugger-statements-catalog-ui-policy-scriptfalse/) | High | Security |
| [JavaScript - Avoid use of debugger statements - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-debugger-statements-catalog-ui-policy-scripttrue/) | High | Security |
| [JavaScript - Avoid use of WebDB - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-webdb-catalog-ui-policy-scriptfalse/) | High | Security |
| [JavaScript - Avoid use of WebDB - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-webdb-catalog-ui-policy-scripttrue/) | High | Security |
| [JavaScript - Use === comparison - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-use-comparison-catalog-ui-policy-scriptfalse/) | Warning | Manageability |
| [JavaScript - Use === comparison - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-use-comparison-catalog-ui-policy-scripttrue/) | Warning | Manageability |
| [Synchronous AJAX call in Catalog UI Policies - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-catalog-ui-policies-scriptfalse/) | High | Performance |
| [Synchronous AJAX call in Catalog UI Policies - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-catalog-ui-policies-scripttrue/) | High | Performance |
| [Catalog UI Policies using GlideRecord - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-using-gliderecord-scriptfalse/) | High | Performance |
| [Catalog UI Policies using GlideRecord - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-using-gliderecord-scripttrue/) | High | Performance |
| [Catalog UI Policies with hard-coded sys_ids - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-with-hard-coded-sys_ids-scriptfalse/) | Medium | Manageability |
| [Catalog Policies with hard-coded sys_ids - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-policies-with-hard-coded-sys_ids-scripttrue/) | Medium | Manageability |
| [Document Object Model (DOM) manipulation in Catalog UI Policies - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-catalog-ui-policies-scriptfalse/) | High | Manageability |
| [Document Object Model (DOM) manipulation in Catalog UI Policies - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-catalog-ui-policies-scripttrue/) |  | Manageability |
| [Modified Out of the Box Element](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/modified-out-of-the-box-element/) | Warning | Scalability |
| [Dot walking to sys_id - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id-catalog-ui-policy-scripttrue/) | Medium | Performance |
| [Dot walking to sys_id - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id-catalog-ui-policy-scriptfalse/) | Medium | Performance |
| [Usage of g_form.setValue on a reference field without displayValue - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-without-displayvalue-catalog-ui-policy-scripttrue/) | High | Performance |
| [Usage of g_form.setValue on a reference field without displayValue - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-wwithout-displayvalue-catalog-ui-policy-scriptfalse/) | High | Performance |