--- title: ServiceNow Rules List description: "Quality Clouds checks the following ServiceNow rules: For logical groupings, see all rules related to a [configuration element](https://qualityclouds.com/documentation/docs/qc/by-configuration-element/by-configuration-element/) or[ impact area](https://qualityclouds.com/documentation/docs/qc/by-impact-area/by-impact-area/).  - [\"Allow Javascript tags in Embedded HTML\" property should be disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/allow-javascript-tags-in-embedded-html-property-should-be-disabled/) - [\"Check UI Action Conditions check before Execution\" should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/check-ui-action-conditions-check-before-execution-should-be-enabled/)…" url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/servicenow-rules-list/" updated: "2025-03-21" category: Rules --- # ServiceNow Rules List Quality Clouds checks the following ServiceNow rules: For logical groupings, see all rules related to a [configuration element](https://qualityclouds.com/documentation/docs/qc/by-configuration-element/by-configuration-element/) or[ impact area](https://qualityclouds.com/documentation/docs/qc/by-impact-area/by-impact-area/).  - ["Allow Javascript tags in Embedded HTML" property should be disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/allow-javascript-tags-in-embedded-html-property-should-be-disabled/) - ["Check UI Action Conditions check before Execution" should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/check-ui-action-conditions-check-before-execution-should-be-enabled/) - [ACLs should not be entirely empty or contain the “Public” role.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/acls-should-not-be-entirely-empty-or-contain-the-public-role/) - [ACLs using GlideRecord queries](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/acls-using-gliderecord-queries/) - [Actions should not be client callable](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/actions-should-not-be-client-callable/) - [AJAXGlideRecord ACL Checking should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ajaxgliderecord-acl-checking-should-be-enabled/) - [Angular Providers with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/angular-providers-with-hard-coded-sys_ids/) - [Anti-CSRF Token setting should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/anti-csrf-token-setting-should-be-enabled/) - [Auditing for Update Sets should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/auditing-for-update-sets-should-be-enabled/) - [Avoid Creating cross-table Business Rule recursive loops](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-creating-cross-table-business-rule-recursive-loops/) - [Avoid creating unnecessary tables in scoped applications which can impact your licensing cost](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-creating-unnecessary-tables-in-scoped-applications-which-can-impact-your-licensing-cost/) - [Avoid Global UI Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-global-ui-scripts/) - [Avoid Script Includes with duplicate names](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-script-includes-with-duplicate-names/) - [Avoid updating the source table on transform maps](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-updating-the-source-table-on-transform-maps/) - [Avoid updating the source table on transform scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-updating-the-source-table-on-transform-scripts/) - [Avoid workflows with too many activities](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-workflows-with-too-many-activities/) - [Avoid workflows with too many timer activities](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/avoid-workflows-with-too-many-timer-activities/) - [Basic Auth SOAP Requests setting should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/basic-auth-soap-requests-setting-should-be-enabled/) - [Business rules defined on the Global table](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/business-rules-defined-on-the-global-table/) - [Business Rules using eval function](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/business-rules-using-eval-function/) - [Business Rules using GlideRecord and getRowCount](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/business-rules-using-gliderecord-and-getrowcount/) - [Business Rules using the SOAP getResponse method](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/business-rules-using-the-soap-getresponse-method/) - [Business rules with debugging statements](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/business-rules-with-debugging-statements/) - [Business rules with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/business-rules-with-hard-coded-sys_ids/) - [Business rules without function](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/business-rules-without-function/) - [By configuration element](https://qualityclouds.com/documentation/docs/qc/by-configuration-element/by-configuration-element/) - [By impact area](https://qualityclouds.com/documentation/docs/qc/by-impact-area/by-impact-area/) - [Catalog Client Scripts should not use unsupported scripting APIs](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-client-scripts-should-not-use-unsupported-scripting-apis/) - [Catalog Client Scripts with empty script field](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-client-scripts-with-empty-script-field/) - [Catalog Client Scripts with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-client-scripts-with-hard-coded-sys_ids/) - [Catalog Client Scripts without function](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-client-scripts-without-function/) - [Catalog Client Scripts with the console.log debugging method](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-client-scripts-with-the-console-log-debugging-method/) - [Catalog items without description](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-items-without-description/) - [Catalog items without short description](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-items-without-short-description/) - [Catalog items with short description equal to name](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-items-with-short-description-equal-to-name/) - [Catalog Policies with hard-coded sys_ids - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-policies-with-hard-coded-sys_ids-scripttrue/) - [Catalog UI Policies using GlideRecord - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-using-gliderecord-scriptfalse/) - [Catalog UI Policies using GlideRecord - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-using-gliderecord-scripttrue/) - [Catalog UI Policies with hard-coded sys_ids - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-with-hard-coded-sys_ids-scriptfalse/) - [Catalog UI Policy Action without field effects](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policy-action-without-field-effects/) - [Catalog with low usage of META tags](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-with-low-usage-of-meta-tags/) - [Catalog with no usage of META tags](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-with-no-usage-of-meta-tags/) - [Catalog with very low usage of META tags](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-with-very-low-usage-of-meta-tags/) - [Child group does not contain all parent roles](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/child-group-does-not-contain-all-parent-roles/) - [Client Generated Scripts Sandbox should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/client-generated-scripts-sandbox-should-be-enabled/) - [Client Scripts defined on the Global table](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/client-scripts-defined-on-the-global-table/) - [Client Scripts should not use unsupported scripting APIs](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-client-scripts-should-not-use-unsupported-scripting-apis/) - [Client Scripts with empty script field](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/client-scripts-with-empty-script-field/) - [Client Scripts with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-client-scripts-with-hard-coded-sys_ids/) - [Client Scripts without function](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/client-scripts-without-function/) - [Client Scripts with the console.log debugging method](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/client-scripts-with-the-console-log-debugging-method/) - [Contextual Security Plugin disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/contextual-security-plugin-disabled/) - [Cookies - HTTP Only should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/cookies-http-only-should-be-enabled/) - [Creating custom tables in the global scope should be avoided](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/creating-custom-tables-in-the-global-scope-should-be-avoided/) - [CSV Request Authorization should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/csv-request-authorization-should-be-enabled/) - [Debugging properties enabled in production environments](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/debugging-properties-enabled-in-production-environments/) - [Debug System Properties Enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/debug-system-properties-enabled/) - [Dictionary entries present for a table that does not exist](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dictionary-entries-present-for-a-table-that-does-not-exist/) - [Document Object Model (DOM) manipulation in Catalog Client Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-catalog-client-scripts/) - [Document Object Model (DOM) manipulation in Catalog UI Policies - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-catalog-ui-policies-scriptfalse/) - [Document Object Model (DOM) manipulation in Catalog UI Policies - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-catalog-ui-policies-scripttrue/) - [Document Object Model (DOM) manipulation in Client Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-catalog-client-scripts/) - [Document Object Model (DOM) manipulation in UI Actions](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-ui-actions/) - [Document Object Model (DOM) manipulation in UI Policies - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-catalog-ui-policies-scriptfalse/) - [Document Object Model (DOM) manipulation in UI Policies - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-ui-policies-scripttrue/) - [Document Object Model (DOM) manipulation in UI Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/document-object-model-dom-manipulation-in-ui-scripts/) - [Dot walking to sys_id](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id/) - [Dot walking to sys_id - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id-catalog-ui-policy-scriptfalse/) - [Dot walking to sys_id - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id-catalog-ui-policy-scripttrue/) - [Dot walking to sys_id - Portal Widget clientScript](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id-portal-widget-clientscript/) - [Dot walking to sys_id - UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id-catalog-ui-policy-scriptfalse/) - [Dot walking to sys_id - UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/dot-walking-to-sys_id-catalog-ui-policy-scripttrue/) - [Empty role assigned to a user.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/empty-role-assigned-to-a-user/) - [Empty roles assigned to a group.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/empty-roles-assigned-to-a-group/) - [Enable AJAXEvaluate should be disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/enable-ajaxevaluate-should-be-disabled/) - [Escape HTML should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/escape-html-should-be-enabled/) - [Escape Jelly should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/escape-jelly-should-be-enabled/) - [Escape XML should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/escape-xml-should-be-enabled/) - [Event Script Action using GlideRecord and getRowCount](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/event-script-action-using-gliderecord-and-getrowcount/) - [Event Script Action with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/event-script-action-with-hard-coded-sys_ids/) - [Fields used to coalesce records in a Table Transform Map should be indexed](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/fields-used-to-coalesce-records-in-a-table-transform-map-should-be-indexed/) - [Flows should not be client callable](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/flows-should-not-be-client-callable/) - [Flows should not run using the admin role](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/flows-should-not-run-using-the-admin-role/) - [Forms with duplicate fields](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/forms-with-duplicate-fields/) - [Forms with too many sections](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/forms-with-too-many-sections/) - [GlideRecord and GlideRecordSecure should not be used in Catalog UI Policies. Script false](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-and-gliderecordsecure-should-not-be-used-in-catalog-ui-policies-script-false/) - [GlideRecord and GlideRecordSecure should not be used in Catalog UI Policies. Script true](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-and-gliderecordsecure-should-not-be-used-in-catalog-ui-policies-script-true/) - [GlideRecord and GlideRecordSecure should not be used in client side scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-and-gliderecordsecure-should-not-be-used-in-client-side-scripts/) - [GlideRecord and GlideRecordSecure should not be used in Service Portal Widget-Client Script](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-and-gliderecordsecure-should-not-be-used-in-service-portal-widget-client-script/) - [GlideRecord and GlideRecordSecure should not be used in UI Policies. Script false](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-and-gliderecordsecure-should-not-be-used-in-ui-policies-script-false/) - [GlideRecord and GlideRecordSecure should not be used in UI Policies. Script true](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-and-gliderecordsecure-should-not-be-used-in-ui-policies-script-true/) - [GlideRecord API usage in Scripted REST API Resource](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-api-usage-in-scripted-rest-api-resource/) - [GlideRecord usage on Catalog Client Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-usage-on-catalog-client-scripts/) - [GlideRecord usage on Client Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-usage-on-client-scripts/) - [GlideRecord usage on Portal Widget Client Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-usage-on-portal-widget-client-scripts/) - [GlideRecord usage on UI Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/gliderecord-usage-on-ui-scripts/) - [Groups should not have an inactive manager](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/groups-should-not-have-an-inactive-manager/) - [Groups should not have inactive members](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/groups-should-not-have-inactive-members/) - [HHRR system properties outside the "Human Resource Scoped" category](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/hhrr-system-properties-outside-the-human-resource-scoped-category/) - [High Security Settings plugin disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/high-security-settings-plugin-disabled/) - [HTML Sanitizer property should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/html-sanitizer-property-should-be-enabled/) - [Inbound Email Actions using GlideRecord and getRowCount](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/inbound-email-actions-using-gliderecord-and-getrowcount/) - [Inbound Email Actions with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/inbound-email-actions-with-hard-coded-sys_ids/) - [Integration accounts should not use the Admin role](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/integration-accounts-should-not-use-the-admin-role/) - [Java Package Collection mode and Collection mode override properties should be disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/java-package-collection-mode-and-collection-mode-override-properties-should-be-disabled/) - [JDBC Data Sources with "Use last run datetime" option unchecked](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/jdbc-data-sources-with-use-last-run-datetime-option-unchecked/) - [Maximum number of actions per flow and subflow.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/maximum-number-of-actions-per-flow-and-subflow/) - [Modified Out of the Box Element](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/modified-out-of-the-box-element/) - [Modules pointing to big tables without filter](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/modules-pointing-to-big-tables-without-filter/) - [Multiple choice catalog variables with too many options](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/multiple-choice-catalog-variables-with-too-many-options/) - [Notification Email Scripts with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/notification-email-scripts-with-hard-coded-sys_ids/) - [Old UI enabled or being used](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/old-ui-enabled-or-being-used/) - [onBefore Business Rule should only update the target table](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/onbefore-business-rule-should-only-update-the-target-table/) - [onBefore Transform Scripts should only update the target table](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/onbefore-transform-scripts-should-only-update-the-target-table/) - [Portal pages should not be made public](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/portal-pages-should-not-be-made-public/) - [Portal widgets should not be made public](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/portal-widgets-should-not-be-made-public/) - [Portal Widgets with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/portal-widgets-with-hard-coded-sys_ids/) - [Potential recursive Business Rules](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/potential-recursive-business-rules/) - [Potential Recursive Business Rules - current.update()](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/potential-recursive-business-rules-current-update/) - [Reports should not be made public](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/reports-should-not-be-made-public/) - [REST API Resource modifying data without Authentication check](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/rest-api-resource-modifying-data-without-authentication-check/) - [REST API Resource modifying data without Authentication check - No Author](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/rest-api-resource-modifying-data-without-authentication-check-no-author/) - [Roles assigned to an invalid user.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/roles-assigned-to-an-invalid-user/) - [Roles without any user](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/roles-without-any-user/) - [Scheduled imports should not run at the same time](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scheduled-imports-should-not-run-at-the-same-time/) - [Scheduled Jobs run by deleted users](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scheduled-jobs-run-by-deleted-users/) - [Scheduled Jobs should not be run by inactive/locked out users](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scheduled-jobs-should-not-be-run-by-inactive-locked-out-users/) - [Scheduled Jobs should specified a value for "Run as" field](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scheduled-jobs-should-specified-a-value-for-run-as-field/) - [Scheduled Jobs without a dedicated integration user](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scheduled-jobs-without-a-dedicated-integration-user/) - [Scripted REST API Resource with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scripted-rest-api-resource-with-hard-coded-sys_ids/) - [Script Includes using GlideRecord and getRowCount](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/script-includes-using-gliderecord-and-getrowcount/) - [Script Includes with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/script-includes-with-hard-coded-sys_ids/) - [Script Include with debugging statements](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/script-include-with-debugging-statements/) - [Script Request Authorization should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/script-request-authorization-should-be-enabled/) - [Scripts directly call to Java packages](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scripts-directly-call-to-java-packages/) - [Scripts should not use gs.sql](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/scripts-should-not-use-gs-sql/) - [Server UI Actions using GlideRecord and getRowCount](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/server-ui-actions-using-gliderecord-and-getrowcount/) - [SLA logging level should be set to "notice"](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/sla-logging-level-should-be-set-to-notice/) - [SOAP Request Strict Security should be enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/soap-request-strict-security-should-be-enabled/) - [SSLv2/SSLv3 should be disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/sslv2-sslv3-should-be-disabled/) - [Stage sets with duplicates entries](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/stage-sets-with-duplicates-entries/) - [Synchronous AJAX call in Catalog Client Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-catalog-client-scripts/) - [Synchronous AJAX call in Catalog UI Policies - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-catalog-ui-policies-scriptfalse/) - [Synchronous AJAX call in Catalog UI Policies - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-catalog-ui-policies-scripttrue/) - [Synchronous AJAX call in Client Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-client-scripts/) - [Synchronous AJAX call in UI Actions](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-ui-actions/) - [Synchronous AJAX call in UI Policies - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-ui-policies-scriptfalse/) - [Synchronous AJAX call in UI Policies - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-ui-policies-scripttrue/) - [Synchronous AJAX call in UI Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-ajax-call-in-ui-scripts/) - [Synchronous Business Rules making SOAP or REST calls](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/synchronous-business-rules-making-soap-or-rest-calls/) - [The "glide.email.read.active" System Property is set to "false".](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-email-read-active-system-property-is-set-to-false/) - [The "glide.email.smtp.active" System Property is set to "false".](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-email-smtp-active-system-property-is-set-to-false/) - [The "glide.image_provider.security_enabled" System Property is set to "false".](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-image_provider-security_enabled-system-property-is-set-to-false/) - [The "glide.login.autocomplete" System Property is set to true](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-login-autocomplete-system-property-is-set-to-true/) - [The "glide.uxf.js_server.consolidate" System Property is set to "false".](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-uxf-js_server-consolidate-system-property-is-set-to-false/) - [The "Log/trace level of TaskSLAController" System Property not set to "notice"](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-log-trace-level-of-taskslacontroller-system-property-not-set-to-notice/) - [The "Security Manager" System Property is set to "Allow Access"](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-security-manager-system-property-is-set-to-allow-access/) - [The assessment_take2 UI page should be public](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-assessment_take2-ui-page-should-be-public/) - [The Change Request table should not be extended](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-change-request-table-should-not-be-extended/) - [The default system User Preference "Rows per Page" set above 100](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-default-system-user-preference-rows-per-page-set-above-100/) - [The demo_data_running_trigger business rule should be disabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-demo_data_running_trigger-business-rule-should-be-disabled/) - [The glide.businessrule.callstack System Property is set to true](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-businessrule-callstack-system-property-is-set-to-true/) - [The glide.db.clone.allow_clone_target System Property is set to true](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-db-clone-allow_clone_target-system-property-is-set-to-true/) - [The glide.xmlutil.max_entity_expansion system property value is not set to 3000.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-glide-xmlutil-max_entity_expansion-system-property-value-is-not-set-to-3000/) - [The Out of the Box admin account should not be inactive or locked out.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-out-of-the-box-admin-account-should-not-be-inactive-or-locked-out/) - [The sn_hr_core.impersonateCheck System Property is false](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-sn_hr_core-impersonatecheck-system-property-is-false/) - [The SOAP Timeout value is over 5 minutes](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-soap-timeout-value-is-over-5-minutes/) - [The System Property "Auto Complete Search" is set to "Contains"](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-system-property-auto-complete-search-is-set-to-contains/) - [The System Property "Auto Complete Wait Time" exceeds 750 ms](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-system-property-auto-complete-wait-time-exceeds-750-ms/) - [The System Property "Go To Search" is set to "Contains"](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-system-property-go-to-search-is-set-to-contains/) - [The System Property "Items per page" includes options over 100](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-system-property-items-per-page-includes-options-over-100/) - [The System Property "Update on Iterate" is enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/the-system-property-update-on-iterate-is-enabled/) - [Too many delete actions on an Update Set](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/too-many-delete-actions-on-an-update-set/) - [Too many fields in a Form Section](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/too-many-fields-in-a-form-section/) - [Transform Maps with "Run business rules" option enabled](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/transform-maps-with-run-business-rules-option-enabled/) - [Transform maps with boolean fields in their import set table](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/transform-maps-with-boolean-fields-in-their-import-set-table/) - [Transform maps with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/transform-maps-with-hard-coded-sys_ids/) - [Transform scripts with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/transform-scripts-with-hard-coded-sys_ids/) - [UI Actions using GlideRecord](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-actions-using-gliderecord/) - [UI Actions with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-actions-with-hard-coded-sys_ids/) - [UI Policies using GlideRecord - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-using-gliderecord-scriptfalse/) - [UI Policies using GlideRecord - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-using-gliderecord-scripttrue/) - [UI Policies with hard-coded sys_ids - scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policies-with-hard-coded-sys_ids-scriptfalse/) - [UI Policies with hard-coded sys_ids - scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-policies-with-hard-coded-sys_ids-scripttrue/) - [UI Policy Action without field effects](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/catalog-ui-policy-action-without-field-effects/) - [UI Scripts including Open Source libraries](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-scripts-including-open-source-libraries/) - [UI Scripts with empty script field](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-scripts-with-empty-script-field/) - [UI Scripts with hard-coded sys_ids](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-scripts-with-hard-coded-sys_ids/) - [UI Scripts without function](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-scripts-without-function/) - [UI Scripts with the console.log debugging method](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/ui-scripts-with-the-console-log-debugging-method/) - [Unlogged API call error condition](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/unlogged-api-call-error-condition/) - [Unused Inactivity Monitors](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/unused-inactivity-monitors/) - [Update Sets should contain a description](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/update-sets-should-contain-a-description/) - [Update Sets should not include images without review.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/update-sets-should-not-include-images-without-review/) - [Update Sets should not include Knowledge Base Articles without review.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/update-sets-should-not-include-knowledge-base-articles-without-review/) - [Usage of current.update() in Script Workflow Activities](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-current-update-in-script-workflow-activities/) - [Usage of g_form.setValue on a reference field without displayValue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-without-displayvalue/) - [Usage of g_form.setValue on a reference field without displayValue - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-wwithout-displayvalue-catalog-ui-policy-scriptfalse/) - [Usage of g_form.setValue on a reference field without displayValue - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-without-displayvalue-catalog-ui-policy-scripttrue/) - [Usage of g_form.setValue on a reference field without displayValue - Portal Widget clientScript](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-without-displayvalue-portal-widget-clientscript/) - [Usage of g_form.setValue on a reference field without displayValue - UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-without-displayvalue-ui-policy-scriptfalse/) - [Usage of g_form.setValue on a reference field without displayValue - UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-g_form-setvalue-on-a-reference-field-without-displayvalue-ui-policy-scripttrue/) - [Usage of getMessage() without preloading message key.](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-getmessage-without-preloading-message-key/) - [Usage of getMessage function without a second parameter](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-getmessage-function-without-a-second-parameter/) - [Usage of getMessage function without a second parameter - Catalog UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-getmessage-function-without-a-second-parameter-catalog-ui-policy-scriptfalse/) - [Usage of getMessage function without a second parameter - Catalog UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-getmessage-function-without-a-second-parameter-catalog-ui-policy-scripttrue/) - [Usage of getMessage function without a second parameter - Portal Widget clientScript](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-getmessage-function-without-a-second-parameter-portal-widget-clientscript/) - [Usage of getMessage function without a second parameter - UI Policy scriptFalse](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-getmessage-function-without-a-second-parameter-ui-policy-scriptfalse/) - [Usage of getMessage function without a second parameter - UI Policy scriptTrue](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-getmessage-function-without-a-second-parameter-ui-policy-scripttrue/) - [Usage of gs.cacheFlush() on Scripts](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-gs-cacheflush-on-scripts/) - [Usage of gs.sleep() on Workflow Activities](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-gs-sleep-on-workflow-activities/) - [Usage of window objects instead of AngularJS services](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/usage-of-window-objects-instead-of-angularjs-services/) - [Workflows should not use stages that are not defined in a Stage Set](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/workflows-should-not-use-stages-that-are-not-defined-in-a-stage-set/) - [Workflows with Notification Activities](https://qualityclouds.com/documentation/docs/qc/servicenow-rules/workflows-with-notification-activities/)