--- title: Sanitize All Translated HTML Fields description: Learn how to configure the glide.translated\_html.sanitize\_all\_fields property to the secure value to ensure that all translated\_html elements are sanitized with an HTML sanitizer. locale: en-US canonical_url: https://www.servicenow.com/docs/r/australia/platform-security/instance-security-hardening-settings/sc-sanitize-all-translated-html-fields.html release: australia product: Instance Security Hardening Settings classification: instance-security-hardening-settings topic_type: reference last_updated: "2026-03-12" reading_time_minutes: 1 breadcrumb: [Validation, sanitization, and encoding, Hardening settings, Platform Security] --- # Sanitize All Translated HTML Fields Learn how to configure the **glide.translated\_html.sanitize\_all\_fields** property to the secure value to ensure that all **translated\_html** elements are sanitized with an HTML sanitizer. When the **glide.translated\_html.sanitize\_all\_fields** system property is set to the value **true**, all translated\_html elements will be sanitized using an HTML sanitizer. When the property is set to **false**, an element will only be sanitized if a dictionary attribute, **html\_sanitize**, is set to **true**. Ensure that the Glide Property **glide.translated\_html.sanitize\_all\_fields** is set to the value **true**. ## More information
| Attribute | Description |
|---|---|
| Configuration name | **glide.translated\_html.sanitize\_all\_fields** |
| Configuration type | System Properties \(/sys\_properties\_list.do\) |
| Data type | Boolean |
| Recommended value | true |
| Default value | <none> |
| Fallback value | false |
| Category | [Validation, sanitization, and encoding](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/platform-security/instance-security-hardening-settings/validation-sanitization-encoding.md) |
| Security risk | - Severity score: 4.6 - CVSS score: Medium - Security risk details: Sanitizing HTML elements is best practice to ensure an attacker cannot embed malicious content that may lead to Cross Site Scripting \(XSS\) attacks. |
| Dependencies and prerequisites | None |
| Functional impact | Allows customers to access any table information if the widget is set to public and included in the property's value. |