---
title: Enable AJAXEvaluate Should Be Disabled
description: "Impact Area Security Severity High Affected Element System property ## Rule ID **SN-0184** ## Impact In some circumstances it is possible for the client to generate arbitrary script code and send it for evaluation to the server. For instance, by…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/servicenow-rules/enable-ajaxevaluate-should-be-disabled/"
updated: "2025-03-21"
category: Rules
---

# Enable AJAXEvaluate Should Be Disabled

Impact Area

Security

           Severity

High

           Affected Element

System property

## Rule ID

**SN-0184**

## Impact

In some circumstances it is possible for the client to generate arbitrary script code and send it for evaluation to the server. For instance, by using the API call AJAXEvaluate, and by specifying Javascript formulas in query filters.

## Remediation

Set the system property “glide.script.allow.ajaxevaluate” to false to disable the use of the API call AJAXEvaluate.

### Time to fix

15 min

## References

This rule is linked to [Common Weakness Enumeration CWE-150 Improper Neutralization of Escape](https://cwe.mitre.org/data/definitions/150.html).