Best Practices Are Best, Except When They're Not

A code-review of sorts where we go over some of the real-world situations when things just don't go the way the Stack Overflow Gods say they should. We'll look at the pros and cons of solutions in these situations and the lessons hopefully learned along the way.  

From: South of Shasta: Software Development, Web Design, Training

Mura ORM + Feed API = Awesomeness

Two of the most powerful features in Mura 7 are the improvements made to Mura ORM and the Feed API.

From: South of Shasta: Software Development, Web Design, Training

The Spring Boot Actuator is the one dependency you should include in every project

In this article, we will focus on the most important Spring Boot starter that you should include in all of your projects. The Spring Boot Actuator.

From: Dan Vega

Ticket to ColdFusion Summit 2023

The Adobe ColdFusion Summit is coming up in October.

From: Pete Freitag's Homepage

CFWT Is Hiring: UI/UX Person

CFWT is looking to hire again.

From: ColdFusion Muse

Exploiting CVE-2017-11286 Six Years Later: XXE in ColdFusion via WDDX Packet

IntroductionπŸŽˆπŸŽ‚πŸŽ‚πŸŽ‚πŸŽ‚πŸŽ‚πŸŽ‚πŸŽˆSix years ago today, on September 12, 2017, Adobe released APSB17-30.

From: Hoya Haxa - A Security Research Blog

A First Look at the new JDBC Client in Spring Boot 3.2

In this tutorial you will learn about the new JDBC Client in Spring Framework 6.1 and Spring Boot 3.2.

From: Dan Vega

A First Look at the new Rest Client in Spring Boot 3.2

This is my first look at the new Rest Client in Spring Boot 3.2. In this tutorial we will discuss what a client is, what are the different implementations of clients available and how to get started with the new Rest Client in Spring Framework 6.1 and Spring Boot 3.2

From: Dan Vega

Technical Details for CVE-2023-29301: Adobe ColdFusion Access Control Bypass for a CFAdmin Authentication Component

BackgroundIn this post I'll be walking though CVE-2023-29301, which is an access control bypass / password brute force vulnerability in Adobe ColdFusion that I reported to Adobe and was fixed on July 11, 2023 in Adobe Product Security Bulletin APSB23-40.

From: Hoya Haxa - A Security Research Blog

Long-Term Funding, Update #4

In my previous Long-Term Funding update I said I would review/overhaul the "ecosystem" and "tutorials" sections.

From: Sean Corfield: An Architect's View

cfscript cf*() functions are Custom Tags

I found an interesting discussion between the community and Adobe today regarding early cfscript functionality for tags.

From: Chris Tierney

MDN Ads are actually really nice

Embedded advertisements get a bad rap.

From: Michael Walter Van Der Velden

Streamline Your Development: Spring Boot with PostgreSQL & pgAdmin in Docker

In this article you will learn about the new Docker Compose module in Spring Boot 3.1 and how to connect to a Postgres database from your application. You will also learn how to use psql in the shell and pgAdmin to manage your database.

From: Dan Vega

deps.edn and monorepos XI (Polylith)

This is part of an ongoing series of blog posts about our ever-evolving use of the Clojure CLI, deps.edn, and Polylith, with our monorepo at World Singles Networks.

From: Sean Corfield: An Architect's View

Simpler Bootstrap accordions

Vertically collapsing accordion UI components are simple to implement these days using native HTML.

From: cfSimplicity

Spring for GraphQL Schema Mapping Inspection Report

Join VMware's Spring Developer Advocate, Dan Vega, as he explores the exciting new releases in Spring for GraphQL. Dive into the enhanced features of the inspection report, walk through how to create a project, and more!

From: Dan Vega

Threads vs Twitter - A New Challenger Approaches

So, what makes this so interesting? There's already been hundreds of twitter competitors that have come and gone in the months since Musk took over the blue bird app.

From: Michael Walter Van Der Velden

On ColdFusion, AES, and Padding Oracle Attacks: Hic Sunt Dracones

TL; DR: If you use AES-CBC (or another block cipher operating in CBC mode) to decrypt user-controlled ciphertext, validate the ciphertext with an HMAC or similar integrity check prior to decryption to avoid Padding Oracle vulnerabilities.

From: Hoya Haxa - A Security Research Blog

Deploying Spring Boot 3 Applications to AWS Lambda

Discover effective solutions for hosting your personal spring boot projects without hefty costs. Boost your skills with Dan Vega, your spring developer advocate, while exploring the capabilities of AWS Lambda.

From: Dan Vega

Long-Term Funding, Update #3

In my previous Long-Term Funding update I said I would review/overhaul the Libraries pages (both authoring and the directory) and write the tools.

From: Sean Corfield: An Architect's View

Adobe ColdFusion Log Verboseness

Server logs in ColdFusion are a must-have resource to help you tune, monitor, and troubleshoot your servers.

From: Chris Tierney

Rogue Engine & JS Game Development

Those who have been following me for a while might know that while I'm no game developer, much like 90% of all other web devs, game development was my starting goal for getting into programming.

From: Michael Walter Van Der Velden

An Ode to the Intel Mac

The general advice is that a computer should last between 2 and 4 years.

From: Michael Walter Van Der Velden

How to add Request Headers using HTTP Interfaces in Spring Boot 3

In this tutorial you will learn how to add a request header when using HTTP Interfaces in Spring Boot 3.

From: Dan Vega