---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Sanitize All Translated HTML Fields \[New in Security Center 2.0\]

# Sanitize All Translated HTML Fields \[New in Security Center 2.0\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Learn how to configure the
glide.translated_html.sanitize_all_fields property to the secure
value to ensure that all translated_html elements are sanitized with an
HTML sanitizer.
When the glide.translated_html.sanitize_all_fields property is
set to true, all
translated_html
elements are sanitized with an HTML sanitizer. If the property is set to false, only
elements with the dictionary attribute
html_sanitize
set to true will be sanitized. This sanitization helps prevent attackers from
embedding malicious content that could lead to cross-site scripting (XSS)
attacks.

## More information {#sc_sanitize_all_translated_html_fields__section_qhx_1b1_xwb}

{#sc_sanitize_all_translated_html_fields__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.translated_html.sanitize_all_fields |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | [Validation, sanitization, and encoding](https://servicenow-prod.fluidtopics.net/F1nREUr0FIKK6cga6jbKwg "Validation, sanitization, and encoding addresses input validation to prevent against vulnerabilities like Cross-Site Scripting (XSS), SQL injection and other attacks.") |
| Security risk | * Severity score: 4.6 * CVSS score: Medium * Security risk details: Not configuring this property to the secure value of true, doesn't sanitize all HTML elements, which increases the likelihood of a bad actor embedding malicious content in a field. {#sc_sanitize_all_translated_html_fields__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
| Functional impact | Allows customers to access any table information if the widget is set to public and included in the property's value. |
[ ]

{#sc_sanitize_all_translated_html_fields__table_ajc_b43_3kb}