---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Enable HTML Sanitizer within Virtual Agent \[Updated in Security Center 1.3 and 1.5\]

# Enable HTML Sanitizer within Virtual Agent \[Updated in Security Center 1.3 and
1.5\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Use the com.glide.cs.html.sanitizer.enabled property to enable
HTMLSanitizerService.
This property controls the whether the HtmlSanitizerService is enabled. If
com.glide.cs.html.sanitizer.enabled is not set to true, then a
Stored Cross-Site Scripting (XSS) attack is possible in the VA web client.

## More information {#sc-enable-html-sanitizer__section_more_information}

Warnung:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.
{#sc-enable-html-sanitizer__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Property name | com.glide.cs.html.sanitizer.enabled |
| Configuration type | System Properties (/sys_properties_list.do) |
| Category | [Validation, sanitization, and encoding](https://servicenow-prod.fluidtopics.net/F1nREUr0FIKK6cga6jbKwg "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Purpose | Prevents application against cross site scripting and HTML injection attacks. |
| Recommended value | true |
| Default value | true |
| Security risk rating | 8 |
| Functional impact | This remediation enforces HTML-output encoding mechanism before the user data is rendered back to the user. If customer has any customization that involves rendering of the HTML attribute or content data, then there is a functionality impact. |
| Security risk | (High) User input should be securely treated when the data is being stored and processed on the application. This reduces client-side cross-site scripting attacks by output encoding the data. |
[ ]

{#sc-enable-html-sanitizer__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).