The glide.ui.strict_customer_uploaded_static_content property is not restricting users from downloading attachments on forms - Support and Troubleshooting

The glide.ui.strict_customer_uploaded_static_content property is not restricting users from downloading attachments on forms Issue  Symptoms After setting a file extension such as .txt in the ' glide.ui.strict_customer_uploaded_static_content ' property, users are still able to download that type of file as an attachment.

Cause This is a misunderstanding of the functionality of that property. It only prevents the download of files uploaded via the ' Upload File ' section of the platform and is not related to attachments.

Explanation Example:

Valid file extension Navigate to System Definition > Upload File Select a valid extension (ex: png) and upload it. Use link at top of page to access the file png is in glide.ui.strict_customer_uploaded_content_types by default so the download is allowed Invalid file extension Navigate to System Definition > Upload File Select an invalid extension (ex: txt) and upload it. Use link at top of page to access the file txt is NOT in glide.ui.strict_customer_uploaded_content_types by default so the download is not allowed The browser shows a 404 error message

Additional Information Please note that this property "strict_customer_uploaded_static_content" is used heavily by the system and customers should not remove the OOB values from this property. This property does not limit down the attachments retrieval from incidents or another area of the platform, this property is only for the "Upload File" area of the platform.

See:

Specify Downloadable File Types" href="https://support.servicenow.com/kb_view.do?sysparm_article=KB0550654#6.3" target="_blank" rel="noopener noreferrer">ServiceNow instance hardening. Customer security > Specify Downloadable File Types (KB0550654) General security settings properties [Madrid]