HTML Sanitizer property should be enabled

Rule ID

Impact

Remove unwanted code and protect against security concerns such as cross-site scripting attacks by sanitizing HTML markup in HTML fields and translated HTML fields.

Remediation

Set the system property "glide.html.sanitize_all_felds" to true.

Time to fix

15 min

References

This rule is linked to Common Weakness Enumeration CWE-150 Improper Neutralization of Escape.