GlideSecurityUtils - Scoped, Global
-
- UpdatedJan 30, 2025
- 1 minute read
- Yokohama
- API reference
The GlideSecurityUtils API provides methods to work with URLs.
Access these methods using the static object GlideSecurityUtils. This class is available in scoped and global scripts.
GlideSecurityUtils - cleanURL(String url)
Removes suspicious encoding to prevent reflected or DOM based cross site scripting.
Name | Type | Description |
---|---|---|
url | String | The URL to be checked. |
Type | Description |
---|---|
String | The URL stripped of problem elements. |
Example
Output: null
GlideSecurityUtils - enforceRelativeURL(String url)
Removes the domain address from the URL, which leaves the page name and parameters.
Name | Type | Description |
---|---|---|
url | String | The URL to be turned into a relative URL. |
Type | Description |
---|---|
String | A relative URL. |
Example
Output: test.do
GlideSecurityUtils - escapeScript(String script)
Add escape characters to a script.
Adding escape characters to a script helps prevent cross-site scripting.
Name | Type | Description |
---|---|---|
script | String | The script to have escape characters added. |
Type | Description |
---|---|
String | The script with escape characters added. |
Example
Output: <script> alert(1)</script>
GlideSecurityUtils - isURLWhiteListed(String url)
Check the specified URL against the system defined allow list.
Name | Type | Description |
---|---|---|
url | String | The URL to be checked against the URL allow list. |
Type | Description |
---|---|
Boolean | Returns true if the specified URL is in the allow list. |
Example
Output: false