System Property Rules

0:00 1:25

The below table shows the list of ServiceNow system property rules that are checked by Quality Clouds.

Description	Severity	Area of impact
The System Property “Go To Search” is set to “Contains”	Low	Performance
The System Property “Update on Iterate” is enabled	Medium	Performance
Debug System Properties Enabled	Low	Performance
The “Log/trace level of TaskSLAController” System Property not set to “notice”	Low	Performance
Debugging properties enabled in production environments	Low	Performance
The System Property “Auto Complete Wait Time” exceeds 750 ms	Medium	Performance
The System Property “Items per page” includes options over 100	Medium	Performance
The SOAP Timeout value is over 5 minutes	High	Performance
The “Security Manager” System Property is set to “Allow Access”	High	Security
The System Property “Auto Complete Search” is set to “Contains”	Low	Manageability
SOAP Request Strict Security should be enabled	High	Security
SSLv2/SSLv3 should be disabled	High	Security
Escape Jelly should be enabled	High	Security
Escape HTML should be enabled	High	Security
Enable AJAXEvaluate should be disabled	High	Security
AJAXGlideRecord ACL Checking should be enabled	High	Security
“Check UI Action Conditions check before Execution” should be enabled	High	Security
Escape XML should be enabled	High	Security
Client Generated Scripts Sandbox should be enabled	High	Security
HTML Sanitizer property should be enabled	High	Security
Java Package Collection mode and Collection mode override properties should be disabled	High	Security
Cookies – HTTP Only should be enabled	High	Security
CSV Request Authorization should be enabled	High	Security
SLA logging level should be set to “notice”	High	Performance
Basic Auth SOAP Requests setting should be enabled	High	Security
Old UI enabled or being used	High	Security
Script Request Authorization should be enabled	High	Security
“Allow Javascript tags in Embedded HTML” property should be disabled	High	Security
Anti-CSRF Token setting should be enabled	High	Security
The glide.businessrule.callstack System Property is set to true	Medium	Performance
The glide.db.clone.allow_clone_target System Property is set to true	High	Manageability
The sn_hr_core.impersonateCheck System Property is false	High	Security
The “glide.login.autocomplete” System Property is set to true	Medium	Security

Updated on March 21, 2025

Was it helpful ?