---
title: Scripted Rest Resource Rules
description: "The below table shows the list of ServiceNow service catalog best practices that are checked by Quality Clouds. See the [Scripted REST API Best Practices](https://qualityclouds.com/documentation/docs/qc/servicenow-coding-best-practice-rules/scripted-rest-api-best-practices/) for designing and implementing scripted rest APIs.  | Description | Severity | Area of impact | | ---…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/scripted-rest-resource-rules/"
updated: "2025-03-21"
category: Rules for ServiceNow / By Configuration Element
---

# Scripted Rest Resource Rules

The below table shows the list of ServiceNow service catalog best practices that are checked by Quality Clouds.

See the [Scripted REST API Best Practices](https://qualityclouds.com/documentation/docs/qc/servicenow-coding-best-practice-rules/scripted-rest-api-best-practices/) for designing and implementing scripted rest APIs. 

| Description | Severity | Area of impact |
| --- | --- | --- |
| [REST API Resource modifying data without Authentication check](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/rest-api-resource-modifying-data-without-authentication-check/) | High | Security |
| [REST API Resource modifying data without Authentication check - No Author](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/rest-api-resource-modifying-data-without-authentication-check-no-author/) | High | Security |
| [GlideRecord API usage in Scripted REST API Resource](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-api-usage-in-scripted-rest-api-resource/) | High | Security |
| [Possible extra-sensitive PII usage in configuration element - Gender](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-extra-sensitive-pii-usage-in-configuration-element-gender/) | High | Security |
| [Possible extra-sensitive PII usage in configuration element - Religion](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-extra-sensitive-pii-usage-in-configuration-element-religion/) | High | Security |
| [JavaScript - Avoid use of Eval function](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-eval-function/) | High | Security |
| [JavaScript - Avoid use of debugger statements](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-debugger-statements/) | High | Security |
| [JavaScript - Avoid use of Function Constructors](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-use-of-function-constructors/) | High | Security |
| [JavaScript - Avoid unrestricted targetOrigin on cross-domain messaging](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-unrestricted-targetorigin-on-cross-domain-messaging/) | High | Security |
| [Possible use of private data](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-use-of-private-data/) | Warning | Security |
| [Possible PII usage in configuration element - Email](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-pii-usage-in-configuration-element-email/) | Warning | Security |
| [Possible PII usage in configuration element - Address](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-pii-usage-in-configuration-element-address/) | Warning | Security |
| [Possible PII usage in configuration element - Nationality](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-pii-usage-in-configuration-element-nationality/) | Warning | Security |
| [Possible PII usage in configuration element - Passport](https://qualityclouds.com/documentation/docs/qc/data-privacy-and-gdpr/possible-pii-usage-in-configuration-element-passport/) | Warning | Security |
| [JavaScript - Avoid making connections on unsafe protocols](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-avoid-making-connections-on-unsafe-protocols/) | Warning | Security |
| [Scripted REST API Resource with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scripted-rest-api-resource-with-hard-coded-sys_ids/) | Medium | Manageability |
| [JavaScript - Use === comparison](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-use-comparison/) | Warning | Manageability |
| [JavaScript - Optimize Loops](https://qualityclouds.com/documentation/docs/qc/javascript-rules/javascript-optimize-loops/) | Warning | Performance |
| [Modified Out of the Box Element](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/modified-out-of-the-box-element/) | Warning | Scalability |