Follow-up on June 2024 CF update: more on change of default algorithm from CFMX_COMPAT

If you're considering or have already implemented the latest CF updates from June 2024 (CF2023 update 8 and CF2021 update 14), you might have struggled a bit to understand completely what Adobe was getting at in the update technotes, as they can sometimes be rather terse in covering some points (wor...

From: Charlie Arehart - Server Troubleshooting

Summercon 2024 Slides - Modern ColdFusion Exploitation and Attack Surface Reduction

Last Friday it was an absolute honor to talk about ColdFusion security at Summercon.

From: Hoya Haxa - A Security Research Blog

An "x-input" Property Binding Directive In Alpine.js

Ben Nadel creates an x-input directive in Alpine.js which allows outer component properties to be bound to inner component properties....

From: Ben Nadel

Code Kata: Building A Tri-State Switch In Alpine.js

Ben Nadel tries to build a tri-state switch / toggle using Alpine.js....

From: Ben Nadel

Helpful "new" CF feature identifies "implicit" scope searches that would fail after March update

Don't miss that Adobe had added a useful feature (a "patch", made available in Apr 2024) to help in identifying any CFML code you may have which refers "implicitly" to scopes that would no longer searched (for any variables without a scope prefix), which is the new default behavior for CF2021, CF202...

From: Charlie Arehart - Server Troubleshooting

Follow-up on March 2024 CF update: feature to log "implicit" scope searches that would fail

Don't miss that Adobe had added a useful feature (a "patch", made available in Apr 2024) to help in identifying any CFML code you may have which refers "implicitly" to scopes that would no longer searched (for any variables without a scope prefix), which is the new default behavior for CF2021, CF202...

From: Charlie Arehart - Server Troubleshooting

Using AttributeCollection To Manage Locking In ColdFusion

Ben Nadel demonstrates how to use attributeCollection to manage locking in ColdFusion....

From: Ben Nadel

Highlighting Dynamic Parts Of A Pretty-Printed JSON Value In JavaScript

Ben Nadel demonstrates how he highlighted the dynamic parts of a pretty-printed JSON value in JavaScript....

From: Ben Nadel

Working Code Podcast - Episode 187: Viability Of The Minimum Viable Product

Ben Nadel and the crew talk about the viability of the Minimum Viable Product; and whether solopreneurship is still possible in the web application industry....

From: Ben Nadel

Announcing Java updates of Jul 2024 for 8, 11, 17, 21, and 22: thoughts and resources

It's that time again: there are new JVM updates released today (Jul 16, 2024) for the current long-term support (LTS) releases of Oracle Java, 8, 11, 17, and 21, as well as the new short-term release 22.

From: Charlie Arehart - Server Troubleshooting

New updates released for Java 8, 11, 17, 21, and 22 as of Jul 16 2024: resources and thoughts

It's that time again: there are new JVM updates released today (Jul 16, 2024) for the current long-term support (LTS) releases of Oracle Java, 8, 11, 17, and 21, as well as the new short-term release 22.

From: Charlie Arehart - Server Troubleshooting

Getting A Struct Key In Its Native Key-Casing In ColdFusion

Ben Nadel demonstrates how to access the internal key-casing of a struct key in ColdFusion....

From: Ben Nadel

OWASP Java Encoder Project Recommends Using Both URL and Attribute Encoding For HREF Attributes

Ben Nadel looks at the OWASP Java Encoder project's recommendation to double-encode dynamic URLs in an HREF context....

From: Ben Nadel

Normalizing Collection Entries In ColdFusion

Ben Nadel creates a user defined function, toEntries(), for normalizing collection iteration in ColdFusion....

From: Ben Nadel

Sorting Arrays With Priority Elements In ColdFusion

Ben Nadel demonstrates how to sort an array with a subset of priority items in ColdFusion....

From: Ben Nadel

Working Code Podcast - Episode 186: Work Insecurities

Ben Nadel and the crew talk about the insecurities that they feel at work regardless of how much value they create for their companies....

From: Ben Nadel

Limited-time discount on upgrade to CF2023 from CF2018 or earlier

Here's great news for those still running CF2018 or earlier, who may have been holding off upgrading to CF2023 because you would have to pay full price.

From: Charlie Arehart - Server Troubleshooting

Limited-time discount on upgrade to CF2023 from CF2018 or earlier

Here's great news for those still running CF2018 or earlier, who may have been holding off upgrading to CF2023 because you would have to pay full price.

From: Charlie Arehart - Server Troubleshooting

Creating A ColdFusion-Oriented HashCode With Loose Types (Part 2)

Ben Nadel updates his FusionCode algorithm to allow for key-casing and type-coercion settings to be configurable in ColdFusion....

From: Ben Nadel

Delighted to be speaking again at Adobe ColdFusion Summit 2024

I'm delighted to announce that I've been selected to speak again (for the 12th straight year) at the upcoming Adobe CF Summit conference, to be held in Las Vegas Sep 30-Oct 1.

From: Charlie Arehart - Server Troubleshooting

Delighted to be speaking again at Adobe ColdFusion Summit 2024

I'm delighted to announce that I've been selected to speak again (for the 12th straight year) at the upcoming Adobe CF Summit conference, to be held in Las Vegas Sep 30-Oct 1.

From: Charlie Arehart - Server Troubleshooting

Working Code Podcast - Episode 185: A/B Testing Mechanics

Ben Nadel and the crew talk about the mechanics of A/B testing; and, how it might be incrementally added to a bulk email system....

From: Ben Nadel

Extracting Illegal Tag Names From AntiSamy Error Messages In ColdFusion

Ben Nadel demonstrates how to extract illegal tag names from the OWASP AntiSamy HTML sanitization error messages in ColdFusion....

From: Ben Nadel

Creating A ColdFusion-Oriented HashCode With Loose Types

Ben Nadel creates a FusionCode algorithm which is a ColdFusion-oriented version of Java's HashCode concept....

From: Ben Nadel

Using An Ordered Struct As A Fixed-Size Cache In ColdFusion

Ben Nadel demonstrates how to build a simple, fixed-size cache using an ordered struct in ColdFusion....

From: Ben Nadel