{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41439,"path":"platform-security/instance-security-hardening-settings/sc-escape-scratchpad.md","title":"Escape scripts in scratchpad","bundle":null,"doc_type":null,"release":"australia","body":"\n# Escape scripts in scratchpad\n\nLearn how scratchpad factors into the security posture of your instance and how to manage it so that malicious scripts can't be executed on it.\n\nThe scratchpad is an easy way to set information on the server that can be accessed in the browser. An admin can script anything to be on it, including arbitrary data from arbitrary records.\n\nEnsure the property **glide.ui.escape\\_scratchpad** is set to **true**.\n\n## More information\n\n<table id=\"table_hhv_dvg_1xb\"><thead><tr><th>\n\nAttribute\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nConfiguration name\n\n</td><td>\n\n**glide.ui.escape\\_scratchpad**\n\n</td></tr><tr><td>\n\nConfiguration type\n\n</td><td>\n\nSystem Properties \\(/sys\\_properties\\_list.do\\)\n\n</td></tr><tr><td>\n\nData type\n\n</td><td>\n\nBoolean\n\n</td></tr><tr><td>\n\nRecommended value\n\n</td><td>\n\ntrue\n\n</td></tr><tr><td>\n\nDefault value\n\n</td><td>\n\n&lt;none&gt;\n\n</td></tr><tr><td>\n\nFallback value\n\n</td><td>\n\ntrue\n\n</td></tr><tr><td>\n\nCategory\n\n</td><td>\n\n[Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md)\n\n</td></tr><tr><td>\n\nSecurity risk\n\n</td><td>\n\n-   Severity score: 6.5\n-   CVSS score: Medium\n-   Security risk details: It is possible to execute malicious script like a cross-site scripting vulnerability.\n\n</td></tr><tr><td>\n\nDependencies and prerequisites\n\n</td><td>\n\nNone\n\n</td></tr><tr><td>\n\nReferences\n\n</td><td>\n\n[Workflow administration](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/servicenow-platform/c_WorkflowAdministration.md)\n\n</td></tr></tbody>\n</table>**Parent Topic:**[Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md)\n\n"}}