---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Require authorization for XML output requests \[Updated in Security Center 1.3\]

# Require authorization for XML output requests \[Updated in Security Center 1.3\] {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Configure this property so that basic authorization is required for all inbound XMLOutputProcessor requests.
If the glide.basicauth.required.xmloutputprocessor property is not set to the recommended value of true, then basic authorization is not required for inbound XMLOutputProcessor requests
which could lead to unauthenticated information disclosure from the instance.  
Warnung:  
This is a safe harbor property, meaning the value can't be altered once it's changed. It is non-revertible.

## More information {#sc-xml-output-authorization__section_qhx_1b1_xwb}

{#sc-xml-output-authorization__table_ajc_b43_3kb__entry__2}

| Attribute | Description |
|-|-|
| Configuration name | glide.basicauth.required.xmloutputprocessor |
| Configuration type | System Properties (/sys_properties_list.do) |
| Data type | Boolean |
| Recommended value | true |
| Default value | true |
| Category | [API and web service](https://servicenow-prod.fluidtopics.net/IQQn4Mcc1sDrMeZ8Xzt9tg "The API and Web Service category ensures that applications have appropriate authentication, authorization and session management, validate all input that traverses a trust boundary and include security controls for all API types.") |
| Security risk | * Severity score: 7.5 * CVSS score: High * Security risk details: Not setting the property to the recommended value of true could lead to sensitive information being leaked from the instance. {#sc-xml-output-authorization__ul_g1g_3sf_xwb} |
| Dependencies and prerequisites | None |
[ ]

{#sc-xml-output-authorization__table_ajc_b43_3kb}