---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Escape scripts in scratchpad \[Updated in Security Center 1.3\]

# Escape scripts in scratchpad \[Updated in Security Center 1.3\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Learn how scratchpad factors into the security posture of your instance and how to manage it so that malicious scripts can't be executed on it.
The scratchpad is an easy way to set information on the server that you can access in the browser. An admin can script anything to be on it, including arbitrary records. If this property is not set to the recommended value of
true, then it is possible to execute malicious scripts like a cross-site scripting vulnerability.

## More information {#sc-escape-scratchpad__section_ghv_dvg_1xb}

{#sc-escape-scratchpad__table_hhv_dvg_1xb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.ui.escape_scratchpad |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | [Validation, sanitization, and encoding](https://servicenow-prod.fluidtopics.net/F1nREUr0FIKK6cga6jbKwg "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Security risk | * Severity score: 6.5 * CVSS score: Medium * Security risk details: If the property is not set to the recommended value of true, then it is possible to execute malicious scripts like a cross-site scripting vulnerability. {#sc-escape-scratchpad__ul_ihv_dvg_1xb} |
| Dependencies and prerequisites | None |
| References | [Workflow administration](https://www.servicenow.com/docs/access?context=c_WorkflowAdministration&version=australia&pubname=australia-servicenow-platform&ft:locale=en-US) |
[ ]

{#sc-escape-scratchpad__table_hhv_dvg_1xb}