---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Disable AJAXEvaluate

# Disable AJAXEvaluate {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the glide.script.allow.ajaxevaluate to protect the system API
from vulnerabilities of Client script execution through AJAX calls.
Elevation to the security_admin role is required to edit the property.  
Warnung:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc-disable-ajaxevaluate__section_more_information}

{#sc-disable-ajaxevaluate__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | glide.script.allow.ajaxevaluate |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Validation, sanitization, and encoding](https://servicenow-prod.fluidtopics.net/F1nREUr0FIKK6cga6jbKwg "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Purpose | To prevent a user from executing scripts as an admin privilege. |
| Recommended value | false |
| Default value | false |
| Configuration type | Boolean |
| Functional impact | This remediation forces the AJAXEvaluate processor to be turned off. It could impact functionality if you are explicitly using the AJAX evaluate processor as part of any customized scripts. |
| Security risk | (High) The AjaxEvaluator processor executes Client scripts in sandbox, however there are several additional properties which can allow the scope of activities in the sandbox to expand. |
| Security risk rating | 7.3 |
| References | This property belongs to the same family of properties that secure and restrict execution of scripts originating from the client, such as glide.script.allow.ajaxevaluate. For more information, see [Enable AJAXEvaluate](https://servicenow-prod.fluidtopics.net/oF4JD9yBCmjSuJHfy6sPxQ "Use the glide.script.allow.ajaxevaluate to protect the system API from vulnerabilities of Client script execution through AJAX calls."). |
[ ]

{#sc-disable-ajaxevaluate__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).