Skip to content

Commit 8b56639

Browse files
aman2519adminniamccash
authored
Check gliderecordsecure (#84)
* Added scan check for Running Business rules for transform map * Scan check for "Use GlideRecordSecure instead of GlideRecord API for CCSI" * Update README.md * Update README.md Expanded CCSI abbreviation to its full text for clarity --------- Co-authored-by: admin <admin@example.com> Co-authored-by: niamccash <39105458+niamccash@users.noreply.github.com>
1 parent 972abcd commit 8b56639

File tree

3 files changed

+47
-1
lines changed

3 files changed

+47
-1
lines changed

‎README.md‎

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -242,6 +242,9 @@ Review the users whose employement end date is in the past and the user is still
242242
### Set glide.invalid_query.returns_no_rows to true
243243
The "glide.invalid_query.returns_no_rows" property provides a safeguard against queries running which could return unintended data which could then be deleted, manipulated or used incorrectly. It is recommended to have this property exist and be set to true. When this property does not exist an invalid query will return all rows.
244244

245+
### Use GlideRecordSecure instead of GlideRecord API for Client Callable Script Include
246+
Use GlideRecordSecure API to ensure the security checks are performed and unauthorized access of data is prevented as it will automatically enforce ACLs.
247+
245248
## Category: User Experience
246249

247250
### Added a Number Prefix which already exists

‎ca8467c41b9abc10ce0f62c3b24bcbaa/checksum.txt‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1 +1 @@
1-
APBZ6N-mXQqTnbxQsCc2BHSyXp9Boqw2IPsl8t_tiGfkZCie3Y_HBRDI1ohtO9n5IZjYoWFKvqlA7F7fyv96kTOlFKK6GyU-tdiUoEqcOGb6K1x9t2oX4vonME33VyIwpeelR7UEPVuU9fQofwdQKQ0g-16C3mEXbfGXvhmgI7kxGU4eJl06omxI8VrED2HXXpiEPV76_WMvd14z3Iddfk2uo2ygohHSAtREtUmG4IZJVbcu4Hc4nWbhOEPeA1jYNPFFcvTK3iwpX8FUgYNRTYQfrCg1BSy8AoozxzFjn8_WX0mi10IhJzRZwrJCXfWhhVQoGdiCvYCqcogxDtNaDUzxkw20MbNXo6-AZpcJMH1EovFOJOS0CzqJ-KdnOKhSooYh7emFWG8xFZrzZi149t4Dq3aWft40Z4g7AjpgXt_7EO_NvCXBaHnXMwSOaiA-PoW2JL_FKI3AIduUybr3xPwQYP4Zbz2UzQtVVMOMeMFTs7JAqoHNkOG-jQNRAa_Bbq4cY_Ru6leaPdKEKVa3IDl1mf9ug7dcVhfkFDszOWRdRWDmJGi-ptN5twYZ_5IFEqIl_9YmylsKX-JobM4bDl-80xGd2v7z96Yj2oZg0ArGuO7EG6BwdQkmT-fvSwrBFawNWPX-OSdoRXoCc217pNPfsXFVNqBZ-sLza74ikRM
1+
AJInFJMOarSNZgy4eVPEI6ZUZTQO4buAfQ2jkBnzn77pHO8fWCuHP6neLRGKEC7iHlLsbGUl7is0NbkoHxzYWRkTwTxhYVY8p9qCuZPB6YXTBkKDo8X2oq-DOGp4hb5uwk5ES8I7a5hNCsIupO6JhrWFLLh9qeaJE6_nOsE-dMhwybJBxSvcaKmrcNqz51GJVu2Xb924Gs7sa1p1UzRVoKKd1z51VqR_oDCNJThz-yAlVdbnTqEKTdU9D98hy8yFXdRNPBow85OFDE3XWTjcfikcrqdULj0MLLarAcUvTuUgMfGBdFJYbnVNpxi7tVUR1SQ2aehcEujbsK-xJEY9kxmygBiddEm1KK1qiSlPJxRpEYo2doHSfVsxddkjkJyz8Ulja82BKj3D4i2EsUR75GcJzwmfgafdoO-pPRRarwYzGDUbWpe1iCTbmJHSZ_OxJTiJTiWGET89NVxYQZ80w3xSAPg7eyjtv4O3ezYEb4fAAQTiRH-6DwihD62dtq9qXKirZdtq9sa8mBL6UQJ_u5EqIeNo7bvkflLQgojzcUf4pM5pc_VHEgfmpEah9Qv6T98rIPOdMkH_dAB5q3uvbmBcPdOy_pNXjNEyLa28W5X9WA6nG3Qu3C0sW-oupQc1u2VgLrFj1hXAkdFHKn-oBIzWc6_--zdSXs70dzyZFBg

‎ca8467c41b9abc10ce0f62c3b24bcbaa/update/scan_table_check_076448b12ffd311002eb2ca62799b628.xml‎

Lines changed: 43 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,43 @@
1+
<?xml version="1.0" encoding="UTF-8"?><record_update table="scan_table_check">
2+
<scan_table_check action="INSERT_OR_UPDATE">
3+
<active>true</active>
4+
<advanced>false</advanced>
5+
<category>security</category>
6+
<conditions table="sys_script_include">active=true^client_callable=true^scriptLIKEnew GlideRecord(^ORscriptLIKEnew GlideRecord (^EQ<item endquery="false" field="active" goto="false" newquery="false" operator="=" or="false" value="true"/>
7+
<item endquery="false" field="client_callable" goto="false" newquery="false" operator="=" or="false" value="true"/>
8+
<item endquery="false" field="script" goto="false" newquery="false" operator="LIKE" or="false" value="new GlideRecord("/>
9+
<item endquery="false" field="script" goto="false" newquery="false" operator="LIKE" or="true" value="new GlideRecord ("/>
10+
<item endquery="true" field="" goto="false" newquery="false" operator="=" or="false" value=""/>
11+
</conditions>
12+
<description>Using GlideRecord API in Client Callable Script Include for database query exposes data security risk</description>
13+
<documentation_url>https://docs.servicenow.com/bundle/utah-api-reference/page/script/server-scripting/concept/c_ScriptIncludes.html#title_client-callable-script-includes</documentation_url>
14+
<finding_type>scan_finding</finding_type>
15+
<name>Use GlideRecordSecure instead of GlideRecord API for CCSI</name>
16+
<priority>2</priority>
17+
<resolution_details>Use GlideRecordSecure API to ensure the security checks are performed and unauthorized access of data is prevented as it will automatically enforce ACLs.</resolution_details>
18+
<run_condition/>
19+
<score_max>100</score_max>
20+
<score_min>0</score_min>
21+
<score_scale>1</score_scale>
22+
<script><![CDATA[(function (engine) {
23+
24+
// Add your code here
25+
26+
})(engine);]]></script>
27+
<short_description>Use GlideRecordSecure instead of GlideRecord API for Client Callable Script Inc</short_description>
28+
<sys_class_name>scan_table_check</sys_class_name>
29+
<sys_created_by>admin</sys_created_by>
30+
<sys_created_on>2023-10-10 19:52:19</sys_created_on>
31+
<sys_id>076448b12ffd311002eb2ca62799b628</sys_id>
32+
<sys_mod_count>3</sys_mod_count>
33+
<sys_name>Use GlideRecordSecure instead of GlideRecord API for CCSI</sys_name>
34+
<sys_package display_value="Example Instance Checks" source="x_appe_exa_checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_package>
35+
<sys_policy/>
36+
<sys_scope display_value="Example Instance Checks">ca8467c41b9abc10ce0f62c3b24bcbaa</sys_scope>
37+
<sys_update_name>scan_table_check_076448b12ffd311002eb2ca62799b628</sys_update_name>
38+
<sys_updated_by>admin</sys_updated_by>
39+
<sys_updated_on>2023-10-11 13:38:32</sys_updated_on>
40+
<table>sys_script_include</table>
41+
<use_manifest>false</use_manifest>
42+
</scan_table_check>
43+
</record_update>

0 commit comments

Comments
 (0)