How do I Access a Service Provider in a Route Guard in Angular?

{ return true; }; That was new to me, and I'm not sure if this was added to Angular 16 or 17.

From: Jeffry Houser's Blog

How to set the Release Date on Masa CMS content en masse with the Feed API

A little while ago we had a Mura site (which has recently been upgraded to Masa) with a bunch of blog articles and other content where the "Release Date" field was left empty by accident.

From: South of Shasta: Software Development, Web Design, Training

Writing CSV with CFML

The Spreadsheet CFML library now has improved support for creating CSV from your data

From: cfSimplicity

Reading large CSV files with CFML

The Spreadsheet CFML library now supports fast, memory efficient CSV file processing

From: cfSimplicity

Critical Variable Mass Assignment Vulnerability in Adobe ColdFusion (CVE-2023-44350)

BackgroundAdobe ColdFusion is vulnerable to a Mass Assignment vulnerability that can result in an attacker being able to modify the value of any variable in any scope within the context of remote CFC methods.

From: Hoya Haxa - A Security Research Blog

How do I run Angular Unit Tests in IntelliJ?

I've been working on a new Angular 16 project, and tried to run tests through IntelliJ only to discover that IntelliJ couldn't find the config file.

From: Jeffry Houser's Blog

ColdFusion Summit 2023 Recap

A few weeks ago was the annual ColdFusion Summit in Las Vegas. And as expected, the event was very worth the trip! Overall I think everything ran very smoothly — food, sessions, staff, the party, and all the other things you'd expect at CF Summit were the same quality as previous years.

From: South of Shasta: Software Development, Web Design, Training

Self Signed Certificates in Edge on Windows 2022

When setting up a server for training purposes I wanted to create a self signed certificate for app1.

From: Pete Freitag's Homepage

CORS & Traefik in TrueNas Scale with TrueCharts

I've been building a homelab in my free time over recent months (alongside improving my smart home and building the next itteration of this blog).

From: Michael Walter Van Der Velden

The newline cat mystery

I ran into a really strange problem today, whenever I would write a file it would show up as empty on my file system.

From: Pete Freitag's Homepage

Long-Term Funding, Update #5

In my previous Long-Term Funding update I said I would review/overhaul the "ecosystem" and "tutorials" sections (once I'd finished the "language" section).

From: Sean Corfield: An Architect's View

New Blog Domain - www.hoyahaxa.com

I recently moved my blog over to a custom domain -- https://www.

From: Hoya Haxa - A Security Research Blog

ColdFusion, Connectors, and CFAdmin Security (for more than just ColdFusion 2023 Update 5 and ColdFusion 2021 Update 11)

IntroductionThis post is about ColdFusion 2023 Update 5 and ColdFusion 2021 Update 11, but it's also about more than just those versions.

From: Hoya Haxa - A Security Research Blog

Best Practices Are Best, Except When They're Not

A code-review of sorts where we go over some of the real-world situations when things just don't go the way the Stack Overflow Gods say they should. We'll look at the pros and cons of solutions in these situations and the lessons hopefully learned along the way.  

From: South of Shasta: Software Development, Web Design, Training

Mura ORM + Feed API = Awesomeness

Two of the most powerful features in Mura 7 are the improvements made to Mura ORM and the Feed API.

From: South of Shasta: Software Development, Web Design, Training

My CF Summit 2023 Schedule

From: South of Shasta: Software Development, Web Design, Training

The Spring Boot Actuator is the one dependency you should include in every project

In this article, we will focus on the most important Spring Boot starter that you should include in all of your projects. The Spring Boot Actuator.

From: Dan Vega

Ticket to ColdFusion Summit 2023

The Adobe ColdFusion Summit is coming up in October.

From: Pete Freitag's Homepage

CFWT Is Hiring: UI/UX Person

CFWT is looking to hire again.

From: ColdFusion Muse

Exploiting CVE-2017-11286 Six Years Later: XXE in ColdFusion via WDDX Packet

Introduction🎈🎂🎂🎂🎂🎂🎂🎈Six years ago today, on September 12, 2017, Adobe released APSB17-30.

From: Hoya Haxa - A Security Research Blog

A First Look at the new JDBC Client in Spring Boot 3.2

In this tutorial you will learn about the new JDBC Client in Spring Framework 6.1 and Spring Boot 3.2.

From: Dan Vega

A First Look at the new Rest Client in Spring Boot 3.2

This is my first look at the new Rest Client in Spring Boot 3.2. In this tutorial we will discuss what a client is, what are the different implementations of clients available and how to get started with the new Rest Client in Spring Framework 6.1 and Spring Boot 3.2

From: Dan Vega

Technical Details for CVE-2023-29301: Adobe ColdFusion Access Control Bypass for a CFAdmin Authentication Component

BackgroundIn this post I'll be walking though CVE-2023-29301, which is an access control bypass / password brute force vulnerability in Adobe ColdFusion that I reported to Adobe and was fixed on July 11, 2023 in Adobe Product Security Bulletin APSB23-40.

From: Hoya Haxa - A Security Research Blog

Long-Term Funding, Update #4

In my previous Long-Term Funding update I said I would review/overhaul the "ecosystem" and "tutorials" sections.

From: Sean Corfield: An Architect's View

cfscript cf*() functions are Custom Tags

I found an interesting discussion between the community and Adobe today regarding early cfscript functionality for tags.

From: Chris Tierney