---
title: UI Action Rules
description: "The below table shows the list of ServiceNow UI Action rules that are checked by Quality Clouds. | Description | Severity | Area of impact | | --- | --- | --- | | [Possible use of private data](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-use-of-private-data/) |…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/by-configuration-element/ui-action-rules/"
updated: "2025-03-21"
category: Rules for ServiceNow / By Configuration Element
---

# UI Action Rules

The below table shows the list of ServiceNow UI Action rules that are checked by Quality Clouds.

| Description | Severity | Area of impact |
| --- | --- | --- |
| [Possible use of private data](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-use-of-private-data/) | Warning | Security |
| [JavaScript - Avoid use of Function Constructors](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-function-constructors/) | High | Security |
| [JavaScript - Avoid use of WebDB](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-webdb/) | High | Security |
| [JavaScript - Avoid use of debugger statements](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-debugger-statements/) | High | Security |
| [JavaScript - Avoid unrestricted targetOrigin on cross-domain messaging](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-unrestricted-targetorigin-on-cross-domain-messaging/) | High | Security |
| [JavaScript - Avoid making connections on unsafe protocols](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-making-connections-on-unsafe-protocols/) | Warning | Security |
| [Javascript - Avoid use of local storage on Client Scripts](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-local-storage-on-client-scripts/) | High | Security |
| [JavaScript - Optimize Loops](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-optimize-loops/) | Warning | Performance |
| [JavaScript - Use === comparison](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-use-comparison/) | Warning | Manageability |
| [UI Actions with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-actions-with-hard-coded-sys_ids/) | Medium | Manageability |
| [Server UI Actions using GlideRecord and getRowCount](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/server-ui-actions-using-gliderecord-and-getrowcount/) | Medium | Scalability |
| [Scripts should not use gs.sql](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scripts-should-not-use-gs-sql/) | High | Manageability |
| [Document Object Model (DOM) manipulation in UI Actions](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-ui-actions/) | High | Manageability |
| [Synchronous AJAX call in UI Actions](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-ui-actions/) | High | Performance |
| [UI Actions with debugging statements](https://qualityclouds.com/documentation/docs/qc/javascript-rules/ui-actions-with-debugging-statements/) | Low | Scalability |
| [UI Actions using GlideRecord](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-actions-using-gliderecord/) | High | Performance |
| [Modified Out of the Box Element](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/modified-out-of-the-box-element/) | Warning | Scalability |