{"revision":"c10276e953456835cdbb1f3a60d58ae1980be353","document":{"id":41553,"path":"platform-security/instance-security-hardening-settings/sc-sanitize-all-translated-html-fields.md","title":"Sanitize All Translated HTML Fields","bundle":null,"doc_type":null,"release":"australia","body":"\n# Sanitize All Translated HTML Fields\n\nLearn how to configure the **glide.translated\\_html.sanitize\\_all\\_fields** property to the secure value to ensure that all **translated\\_html** elements are sanitized with an HTML sanitizer.\n\nWhen the **glide.translated\\_html.sanitize\\_all\\_fields** system property is set to the value **true**, all translated\\_html elements will be sanitized using an HTML sanitizer. When the property is set to **false**, an element will only be sanitized if a dictionary attribute, **html\\_sanitize**, is set to **true**.\n\nEnsure that the Glide Property **glide.translated\\_html.sanitize\\_all\\_fields** is set to the value **true**.\n\n## More information\n\n<table id=\"table_ajc_b43_3kb\"><thead><tr><th>\n\nAttribute\n\n</th><th>\n\nDescription\n\n</th></tr></thead><tbody><tr><td>\n\nConfiguration name\n\n</td><td>\n\n**glide.translated\\_html.sanitize\\_all\\_fields**\n\n</td></tr><tr><td>\n\nConfiguration type\n\n</td><td>\n\nSystem Properties \\(/sys\\_properties\\_list.do\\)\n\n</td></tr><tr><td>\n\nData type\n\n</td><td>\n\nBoolean\n\n</td></tr><tr><td>\n\nRecommended value\n\n</td><td>\n\ntrue\n\n</td></tr><tr><td>\n\nDefault value\n\n</td><td>\n\n&lt;none&gt;\n\n</td></tr><tr><td>\n\nFallback value\n\n</td><td>\n\nfalse\n\n</td></tr><tr><td>\n\nCategory\n\n</td><td>\n\n[Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md)\n\n</td></tr><tr><td>\n\nSecurity risk\n\n</td><td>\n\n-   Severity score: 4.6\n-   CVSS score: Medium\n-   Security risk details: Sanitizing HTML elements is best practice to ensure an attacker cannot embed malicious content that may lead to Cross Site Scripting \\(XSS\\) attacks.\n\n</td></tr><tr><td>\n\nDependencies and prerequisites\n\n</td><td>\n\nNone\n\n</td></tr><tr><td>\n\nFunctional impact\n\n</td><td>\n\nAllows customers to access any table information if the widget is set to public and included in the property's value.\n\n</td></tr></tbody>\n</table>**Parent Topic:**[Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md)\n\n"}}