i am doing a array loop and inside the array loop i have another loop for every array item to try atleast 10 times before giving up, so i had the code working, but it is just taking time and returning me results, i am seeing if i can the async somhow so they can work with my code so atleast running parrell will give me results much faster

A new security issue: a CVE in Java itself https://neilmadden.blog/2022/04/19/psychic-signatures-in-java/

There are many vulnerabilities (most notably CVE-2021-20190) showing up in a security scan that are related to /cfusion/lib/jackson-databind-2.8.8.jar (Adobe CF 2018 update 13). Is there any documentation on how to address that? I can't seem to find anything useful on google.

Today when I did box server start I got 127.0.0.1 didn’t send any data. so i tried a simple cfml page like <cfoutput>hello</cfoutput> same error. Then I did box update --force and then relaunche...same error? What can I do to trouble shoot this error.This is not a live server so I can wipe out the .command directory if need be

Has anyone managed to connect cfml to CalDAV? I'm struggling to find an example.

I see that Adobe has posted links to jdk-11.0.15 on their ColdFusion Downloads page. Has anyone installed it and checked it out? How much risk do folks think that'd be?

i wanted to run a project swaped by two different databases but using some kind of link

both dbs are same and have same config, i is UAt and anoher is dev

For security, in the past, I've used

hash()

with an application and a per-user salt to generate passwords. With a new app I'm working on, I'm looking at bcrypt but from what I've read it doesn't have the concept of an application and per-user salt. Is adding an application-wide workfactor enough? Should I also top-and-tail the password with the two salts as I've done in the past?

anyone connected to google analytics api in cfscript using oauth2 ?

Is there a way to discover which coldfusion server is being used in a cluster?

Anyone using Glowroot with ColdFusion or Lucee ?

anyone can share riaforge link? if they had iut stored somewhere

can any body recommend a decent doc comment generator for vscode?

Almost 0 Java experience & trying to incorporate a Java Library in my app for starting a SMART on FHIR app. How would I take this github repository (https://github.com/HealthLX/smart-on-fhir) and turn it into a .JAR file to use in my CFML?

How would I write debugging output / logs to the main system output? (i.e. what I'd see on my docker-compose logs in terminal or on my ECS container logs in CloudWatch) . Just looking for a way to add some tracing logs for debugging production issues in CloudWatch. Our current setup, the lucee logs location isn't tied to any persistent storage location, so I'm wondering if there's a way to avoid using the standard application.log. Thanks as always!

Hi, the default "output"

function

attribute in cfscript is true?

Lucee 5.3.9.133 released https://dev.lucee.org/t/lucee-5-3-9-133-stable-released/10038

Hi All. We're considering trying to improve server performance by filtering out bots that hit the site. We have a list of bots already. Is there a best practice in how to do this most effectively? We obviously want some spiders (e.g. google) to be able to index the content. For example, with regards to documents linked to web pages, would it make sense to block bots from clicking those links? Same with form buttons. Any feedback is greatly appreciated.

@nickg You should consider implementing something higher up so it doesn't even hit your app server -- either modesecurity at your webserver level, a reverse proxy behind your load balancer, or something external like CloudFlare outside your perimeter. I've actually worked on a lot of this stuff lately.

Dumb question. Is there a "safe" version of structGet() or something similar, to get the value of a struct key if it exists, but not blow up or modify the struct by creating new keys if it doesn't? I don't even need multi-layer support at the moment, just the equivalent of structKeyExists(struct, key) ? struct[key] : "". I can do that of course, just wondering if I missed a built-in thing.

By curiosity, is there any way to intercept a cfquery to modify it before it passes on to the database? I'm already expecting a "no". Lol

Does anyone else here lament that so much great info here is locked up in Slack, not searchable from the outside? There's a new solution we should perhaps consider: https://www.linen.dev. It's a new free service to make slack content publicly searchable, which can then be thus findable by Google, etc.. I learned of it today from another community I follow (pulumi) who did a blog post today on how they are using it to solve this very problem. I will acknowledge there's not much info on the linen site--maybe more is offered once one does signup. You can at least see what the linen search ui would look like for the pulumi community slack here. Ours would be https://www.linen.dev/s/cfml (but it does not work for now). Notice it also offers an easy way for folks to join the slack...another win, for folks who would find it via google, etc. I can't imagine that anyone would feel that info here should NOT be web-searchable. But even if there IS some complaint, I wonder if "the needs of the many" might outweigh the concerns of a few, to paraphrase Spock. Or if we could put to a vote or something. Our challenge may be that nobody really is "in control" of the CFML slack to decide or hold that vote or implement that change. But I wanted to put this up for discussion...even if it may take weeks, months, or years to "make it happen" for whatever reason.

Most recent ACF supports .each on arrays, right?

I just dropped a .JAR file in

/opt/lucee/server/lucee-server/context/lib/

and I'm at a loss for how I access it with

createObject("java","????")

. I see the Lucee docs say it "should have package path as well as package name". I know that per the Java documentation, in its native language it would be imported by this package name

com.healthx.smartonfhir

but that doesn't seem to be found by Lucee. I've tried a lot of things but having no luck.

Is there any way to time how long it takes for a response to return to the CF box from say a DB server/request? Not the execution time of the query, literally just the request to the DB server?

anyone know if there are hard, fixed limits to the amount of string data you can set for a cfthrow's message or detail value? if it's like most other things in cf, the answer is no, no limit beyond the actual available jvm memory, but i have a situation where i'd like to rethrow a json error payload retrieved from a third party api, and the only way i can do that is to pass the json as one of the thrown exception's attributes (or so i think)

@abram is there a way I can run a gist in trycf.com "headlessly"? I suspect there might be abuse concerns in doing so, so perhaps not? Basically I was wanting to make a request that does the equiv of clicking the "Run Code" button, but just get the response content from the "Results" iframe back.

Hello, I am trying to upload a pdf file which is 60MB in size using cf file upload and I am getting 'The page was not displayed because the request entity is too large". I have updated the uploadReadAheadSize on IIS config file to higher value but I am still getting the error. Any suggestions?

Fusebox.org is gone, How do I get some fusebox information? I just search by google now. Thanks for help