---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Restrict allowed Java packages \[Updated in Security Center 1.3\]

# Restrict allowed Java packages \[Updated in Security Center 1.3\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Configuring these properties protect from dangerous APIs being exposed to the scripting
engine.
Configure the system tables and install the recommended plugin accordingly.

If the sys_whitelist_member and
sys_whitelist_package table are not empty values, then dangerous
APIs may be exposed to the scripting engine. Entries correspond to the Java namespace
that have not been approved by ServiceNow security teams.

Install the Packages call removal tool. See [Packages call removal tool](https://servicenow-prod.fluidtopics.net/9Y84MsDaMLCNgOE1Pq2O5w "Activate and run the Packages Call Removal Tool (com.glide.script.packages_call_removal) plugin, and then consider whether each of the proposed changes should be completed or rejected.") for details.

Contact Customer Service and Support to edit these tables.

## More information {#sc-java-packages-allowlist__section_more_information}

{#sc-java-packages-allowlist__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Table, plugin name | Tables: * sys_whitelist_member * sys_whitelist_package {#sc-java-packages-allowlist__ul_cwy_zms_pvb}Plugin: com.glide.script.packages_call_removal |
| Configuration type | Tabular Configuration, Plugins |
| Category | [Validation, sanitization, and encoding](https://servicenow-prod.fluidtopics.net/F1nREUr0FIKK6cga6jbKwg "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Purpose | Protect from dangerous APIs being exposed to the scripting engine. |
| Recommended value | Empty |
| Default value | None. This is a table configuration and not a Glide Property, so there is no default value. |
| Configuration type | table list, plugin |
| Security risk | (High) Dangerous APIs may be exposed to the scripting engine. These supported APIs will likely introduce instability and insecurity within the instance. |
| Security risk rating | 8.2 |
[ ]

{#sc-java-packages-allowlist__table_ajc_b43_3kb}

To learn more about adding or creating a system
property, see [Add a system property](https://www.servicenow.com/docs/access?context=t_AddAPropertyUsingSysPropsList&version=australia&pubname=australia-platform-administration&ft:locale=en-US).
* **[Packages call removal tool](https://servicenow-prod.fluidtopics.net/9Y84MsDaMLCNgOE1Pq2O5w)**   
  Activate and run the Packages Call Removal Tool (com.glide.script.packages_call_removal) plugin, and then consider whether each of the proposed changes should be completed or rejected.