Take a look at : https://github.com/jonathanyip/simple-cf-app & https://teratech.com/wp-content/uploads/2019/05/ColdFusion__ReactJS.pdf

In

Masa 7.2

how do I pass custom CSS and styles to the CKEditor?

I have a client who wants an external link to his YouTube channel to be displayed in the drop-down menu and, when clicked, open a new tab. I am not sure it is possible, but if anyone has any ideas, it would be very helpful. Thank you.

Added a form (works fine) to a page and then added a file upload and tried submitting a 4 MB JPG file. It took a while but worked fine on the website. THe delivered form response via email however contains a download lik, which then says file or directory does not exist: Column: 0 ID: ?? Line: 265 Raw Trace: content.file.processimgcfimage_cfc$cf.udfCall(/mura/content/file/processImgCfimage.cfc:265) Template: /var/www/siteID/core/mura/content/file/processImgCfimage.cfc Type: cfml This is with Masa CMS 7.3.3, woudl this work in 7.4 perhaps? Or is it "some permission issue"? Any ideas? Thanks!

Hello. Are there any instructions available to upgrade from v7.2.7 to the latest version? Can we jump from 7.2 to 7.4.4 directly and are there any db updates involved?

Heads-up -- details on the Mura/Masa CMS vulnerabilities that were patched a couple weeks ago are now public - https://blog.projectdiscovery.io/hello-lucee-let-us-hack-apple-again/. Patch now if you haven't already.

In Mura, forms are dynamically build with

mura.js

or

mura.min.js

. In the release notes for Masa I see under

7.4.0

the remark

reviewed form module

What does this mean? Has there been a rehaul? The rendering from within the

.js

makes it very difficult to customize some settings (e.g. adding an

auto-complete

or

aria-label

attribute).

Hi Joost, in 7.4.0 we introduced new modules and we’ve tested and reviewed the existing ones.

I would have to dig deep to check if we changed something to the forms module. But if we just mentioned a “review”, I don’t think that was the case.

Hi Guust, ok thanks. Am i correct in my assumption that all formbuilding is done from within in the

.js

files?

@ehoffman has left the channel

In my site I have functionality for news and search results to show a pager to allow for pagination of the entries (like Google does, see screenshot). If I create a module for this, how do I call the module from within my .cfm template?

Security Vulnerability Fix What was the issue ? We’ve been informed about multiple high and critical vulnerabilities in Masa CMS. What is fixed ? • The mentioned vulnerabilities have been fixed. • Additional security improvements have been made. What versions are affected? Masa CMS versions 7.2, 7.3 and 7.4 are affected. What should you upgrade ? • If you’re on Masa CMS 7.4, you should update to version 7.4.6 immediately. This can be done by using the “Update Masa CMS Core” option in the menu of the Masa CMS Administrator or by applying a manual update. • If you’re on Masa CMS 7.3, you should update to version 7.3.13 immediately. This can be done by applying a manual update. • If you’re on Masa CMS 7.2, you should update to version 7.2.8 immediately. This can be done by applying a manual update. What’s Changed • Sections can act as fieldsets by @grantshepert • Disable enableMuraTag, enableDynamicContent and sharableRemoteSessions by default • Additional security improvements have been made Full Changelog: 7.4.5...7.4.6

I am running into a upgrading issue. In Mura 7 we have attributes in an Extended attribute set where we use an optionlist. In the

old

Mura we had

[mura]$.getNewsOptionLabelList()[/mura]

which would run

getNewsOptionLabelList()

from the Contentrenderer to build an option list in a selectbox. In Masa 7.2 this is not working and we only see

[mura]$.getNewsOptionLabelList()[/mura]

in a single option of the select box. I have tried replacing both

[mura]

and

$

with

m

and tried

[m]

, but no luck What is the correct syntax to run

getNewsOptionLabelList()

from the Contentrenderer

Hi eveyone, In the latest security patch we’ve changed the default value of

enableDynamicContent

to

false

. This created issues with some of the users. We’ve been investigation on how to improve the functionality around

enableDynamicContent

and we’ve got a fix ready. But... we would like to ask you to test our fix and let us know how you experience it. https://github.com/MasaCMS/MasaCMS/pull/303 Looking forward to your feedback!

On Masa 7.3 and 7.4 when I try to open the filebrowser, I get an error. Is

filebrowser

another undocumented key in

settings.ini.cfm

?

{
    "error": {
        "message": "Unhandled Exception",
        "code": "server_error",
        "stacktrace": {
            "extended_info": "",
            "message": "key [filebrowser] doesn't exist",
            "detail": "",
            "additional": {},
            "tagcontext": [
                {
                    "raw_trace": "resourcebundle.resourcebundle_cfc$cf$2b.udfCall(/mura/resourceBundle/resourceBundle.cfc:233)",
                    "codeprintplain": "231: \t\t}\n232: \n233: \t\treturn variables.resourceBundleStruct[key];\n234: \n235: \t}\n",
                    "column": "0",
                    "line": "233",
                    "template": "/var/www/html/local/zmc/www/core/mura/resourceBundle/resourceBundle.cfc",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "231: \t\t}<br>\n232: <br>\n<b>233: \t\treturn variables.resourceBundleStruct[key];</b><br>\n234: <br>\n235: \t}<br>\n"
                },
                {
                    "raw_trace": "resourcebundle.resourcebundlefactory_cfc$cf.udfCall(/mura/resourceBundle/resourceBundleFactory.cfc:117)",
                    "codeprintplain": "115: \n116: \tpublic function getKeyStructure(required string locale=\"#variables.locale#\", key) output=false {\n117: \t\treturn getResourceBundle(arguments.locale).getKeyStructure(arguments.key);\n118: \t}\n119: \n",
                    "column": "0",
                    "line": "117",
                    "template": "/var/www/html/local/zmc/www/core/mura/resourceBundle/resourceBundleFactory.cfc",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "115: <br>\n116: \tpublic function getKeyStructure(required string locale=&quot;#variables.locale#&quot;, key) output=false {<br>\n<b>117: \t\treturn getResourceBundle(arguments.locale).getKeyStructure(arguments.key);</b><br>\n118: \t}<br>\n119: <br>\n"
                },
                {
                    "raw_trace": "core.modules.v1.filebrowser.model.beans.filebrowser_cfc$cf$52.udfCall2(/muraWRM/core/modules/v1/filebrowser/model/beans/filebrowser.cfc:912)",
                    "codeprintplain": "910: \t\targuments.siteid == \"\" ? \"default\" : arguments.siteid;\n911: \t\tvar m=getBean('$').init(arguments.siteid);\n912: \t\tvar rb = application.rbFactory.getKeyStructure(session.rb,'filebrowser');\n913: \n914: \t\treturn rb;\n",
                    "column": "0",
                    "line": "912",
                    "template": "/var/www/html/local/zmc/www/core/modules/v1/filebrowser/model/beans/filebrowser.cfc",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "910: \t\targuments.siteid == &quot;&quot; ? &quot;default&quot; : arguments.siteid;<br>\n911: \t\tvar m=getBean('$').init(arguments.siteid);<br>\n<b>912: \t\tvar rb = application.rbFactory.getKeyStructure(session.rb,'filebrowser');</b><br>\n913: <br>\n914: \t\treturn rb;<br>\n"
                },
                {
                    "raw_trace": "core.modules.v1.filebrowser.model.beans.filebrowser_cfc$cf$52.udfCall2(/muraWRM/core/modules/v1/filebrowser/model/beans/filebrowser.cfc:938)",
                    "codeprintplain": "936: \t\t\teditfilelist = m.globalConfig().getValue(property='filebrowsereditlist',defaultValue=editfilelist); // settings.ini.cfm: filebrowsereditlist\n937: \t\t\timagelist = m.globalConfig().get(property='filebrowserimagelist',defaultValue=imagelist); // settings.ini.cfm: filebrowserimagelist\n938: \t\t\tvar rb = getResourceBundle(arguments.siteid);\n939: \t\t\tresponse.settings = {\n940: \t\t\t\teditfilelist: editfilelist,\n",
                    "column": "0",
                    "line": "938",
                    "template": "/var/www/html/local/zmc/www/core/modules/v1/filebrowser/model/beans/filebrowser.cfc",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "936: \t\t\teditfilelist = m.globalConfig().getValue(property='filebrowsereditlist',defaultValue=editfilelist); // settings.ini.cfm: filebrowsereditlist<br>\n937: \t\t\timagelist = m.globalConfig().get(property='filebrowserimagelist',defaultValue=imagelist); // settings.ini.cfm: filebrowserimagelist<br>\n<b>938: \t\t\tvar rb = getResourceBundle(arguments.siteid);</b><br>\n939: \t\t\tresponse.settings = {<br>\n940: \t\t\t\teditfilelist: editfilelist,<br>\n"
                },
                {
                    "raw_trace": "client.api.json.v1.jsonapiutility_cfc$cf$4d.udfCall2(/mura/client/api/json/v1/jsonApiUtility.cfc:1172)",
                    "codeprintplain": "1170: \n1171: \t\t\t\t\t\tvar entity=getBean(params.entityName);\n1172: \t\t\t\t\t\tvar result=invoke(entity,pathInfo[3],params);\n1173: \t\t\t\t\t\treturn serializeResponse(statusCode=200,response={'apiversion'=getApiVersion(),'method'=params.method,'params'=getParamsWithOutMethod(params),'data'=result});\n1174: \t\t\t\t\t} else if (params.entityName=='content') {\n",
                    "column": "0",
                    "line": "1172",
                    "template": "/var/www/html/local/zmc/www/core/mura/client/api/json/v1/jsonApiUtility.cfc",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "1170: <br>\n1171: \t\t\t\t\t\tvar entity=getBean(params.entityName);<br>\n<b>1172: \t\t\t\t\t\tvar result=invoke(entity,pathInfo[3],params);</b><br>\n1173: \t\t\t\t\t\treturn serializeResponse(statusCode=200,response={'apiversion'=getApiVersion(),'method'=params.method,'params'=getParamsWithOutMethod(params),'data'=result});<br>\n1174: \t\t\t\t\t} else if (params.entityName=='content') {<br>\n"
                },
                {
                    "raw_trace": "content.contentserver_cfc$cf$22.udfCall2(/mura/content/contentServer.cfc:615)",
                    "codeprintplain": "613: \t\t\t<cfset siteid=\"default\">\n614: \t\t</cfif>\n615: \t\t<cfreturn getBean('settingsManager').getSite(siteid).getApi('json','v1').processRequest(arguments.path)>\n616: \t<cfelseif left(arguments.path,len(restendpoint)) eq restendpoint or left(arguments.path,len(restendpoint)) eq restendpoint>\n617: \t\t<cfset request.muraAPIRequest=true>\n",
                    "column": "0",
                    "line": "615",
                    "template": "/var/www/html/local/zmc/www/core/mura/content/contentServer.cfc",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "613: \t\t\t<cfset siteid=&quot;default&quot;><br>\n614: \t\t</cfif><br>\n<b>615: \t\t<cfreturn getBean('settingsManager').getSite(siteid).getApi('json','v1').processRequest(arguments.path)></b><br>\n616: \t<cfelseif left(arguments.path,len(restendpoint)) eq restendpoint or left(arguments.path,len(restendpoint)) eq restendpoint><br>\n617: \t\t<cfset request.muraAPIRequest=true><br>\n"
                },
                {
                    "raw_trace": "content.contentserver_cfc$cf$22.udfCall2(/mura/content/contentServer.cfc:777)",
                    "codeprintplain": "775: \n776: \t<cfif listFindNoCase('_api,tasks',listFirst(path,'/'))>\n777: \t\t<cfreturn handleAPIRequest(path)>\n778: \t<cfelse>\n779: \n",
                    "column": "0",
                    "line": "777",
                    "template": "/var/www/html/local/zmc/www/core/mura/content/contentServer.cfc",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "775: <br>\n776: \t<cfif listFindNoCase('_api,tasks',listFirst(path,'/'))><br>\n<b>777: \t\t<cfreturn handleAPIRequest(path)></b><br>\n778: \t<cfelse><br>\n779: <br>\n"
                },
                {
                    "raw_trace": "index_cfm$cf.call(/index.cfm:75)",
                    "codeprintplain": "73: modified version; it is your choice whether to do so, or to make such modified version available under the GNU General Public License \n74: version 2 without this exception.  You may, if you choose, apply this exception to your own modified versions of Mura CMS.\n75: ---><cfoutput>#application.contentServer.handleRootRequest()#</cfoutput>\n",
                    "column": "0",
                    "line": "75",
                    "template": "/var/www/html/local/zmc/www/index.cfm",
                    "id": "??",
                    "type": "cfml",
                    "codeprinthtml": "73: modified version; it is your choice whether to do so, or to make such modified version available under the GNU General Public License <br>\n74: version 2 without this exception.  You may, if you choose, apply this exception to your own modified versions of Mura CMS.<br>\n<b>75: ---><cfoutput>#application.contentServer.handleRootRequest()#</cfoutput></b><br>\n"
                }
            ],
            "errorcode": "0",
            "errnumber": "0",
            "type": "expression",

    },
    "method": "invalid",
    "apiversion": "v1"
}

Posting it here as well: https://cfml.slack.com/archives/C06TA0A9W/p1719308915872659

Seems more like a Lucee issue then a Masa CMS related issue.

After some more brainstorming with our IT-guys I tried something WILD - setting FULL CONTROL on the Windows system account Lucee runs under - and hey, now uploading works! Presumably all other security settings but Full Control on the /Lucee folder (where the webcontexts run) are inadequate for file uploading and file moving / copying. We now finally have a fully working MASA CMS running multiple sites on the latest stable build of Lucee 6! 🙂

Is Masa CMS tested on boxlang? https://boxlang.ortusbooks.com/getting-started/installation Or is this in the planning stage? Have some old VPS that need retiring and considering moving some small sites to boxlang. Or Lucee 6, is that's tested? So tired of having to run old versions of stuff which then throws warnings everywhere. :)

Hi. I would like to show a dropdown with options on the basic tab of a content page in the CMS. The administrator should be able to change the options shown in the dropdown via the CMS. Is this possible?

Hi all, anyone know of active hacks or breaches in latest version of MASA CMS? We are seeing intermittent mitigations by our virus scanner for PHP/Webshell.ODS originating in the Lucee 6 Tomcat temp directory, as an upload. None of our other sites on that server have an upload functionality, only MASA CMS has it. The mitigated file does not occur in any of the webcontexts on the server, but in the lucee-server temp folder itself. Maybe it's a false positive, but feel free to chime in. Googling didn't really yield a result.

Hi all, does anyone maybe know of a way to block the extensive 500 error messages of MASA CMS on production systems, but still show them on DEV-systems? A switch or setting somewhere?

Hi all, a quick question that maybe could lead to a pull-request or a change in MASA CMS: I have implemented a quick fix to prevent people from being able to access the MASA CMS login screen at /admin. Maybe it could be a permanent feature in MASA CMS? Via a Settings variable or something? Changed in /admin/core/views/login/main.cfm

<cfif getHttpRequestData().headers["X-Forwarded-For"] eq "[localIPFromSettings]">

    <!-- show login -->

<cfelse>

    <cflocation url="[redirect-to-some-URL]" statuscode="302" addtoken="false">

</cfif>

Does anybody know if Slatwall still exists? It used to be a really nice shopping cart for Mura back in the day, but I know when Blueriver took Mura closed source, they were working to break their dependency.

I have two sites in my Masa installation. Where do I put custom functions that i want to be able to use in both sites? Now I have them in the

contentRenderer.cfc

for each site. Creating a

contentRenderer.cfc

in my sites folder does not seem to work.

Is it normal for the Masa 7.5+ update process on Linux / Lucee to change ownership of many /admin/ code files from our original server user to root? Our site admin requests all turn to 403 Forbidden on the assets - apparently after an upgrade. Coincidence? Known issue?

Trying to update core from 7.5, is this a nominal response?

@guustnieuwenhuis 1. When Masa (or Mura) calls S3 to populate the Thumbnails for the File (image) Explorer, is it using the bucket's "/Thumbs" subfolder for the files listing display? 2. When a user uploads an image, is it Mura/Masa's responsibility to create a Thumbnail and upload that too?