We have just finished reworking our code to be CSP-compliant and are working on making the MASA CMS backend CSP-compliant as well. More than 200 inline script tags that have to be nonce'd, not a small task. And we run the risk of all our work being overwritten at the next core-update, as all the Admin changes have to be done in the core. Tips anyone?

Is Coldfusion 2021 supported for running Masa or is it just Lucee that is supported now?

We support ACF2021, but we’re a little behind on testing for it.

We’ve released a security patch for Masa CMS: https://github.com/MasaCMS/MasaCMS/discussions/202

Masa CMS v7.4.3 is out: https://github.com/MasaCMS/MasaCMS/releases/tag/7.4.3

Hi Dev's, I have done my new site on Masa CMS 7.4.0 version. I have no issue while do upload image on ckeditor. But when I'm moving my changes into my stage server I'm facing below issue ( Internal server 500 ). My stage is in Masa CMS 7.4.2 version. Could you any one help me on this one ? Thanks in advance !

Note : I can see lot of code change on the below files from Masa 7.4.0 to 7.4.2 core\vendor\ckeditor\plugins\murafilebrowser\filebrowser.cfm core\mura\backport\backport.cfm

??

I have did one more testing on my local by using Masa 7.4.2 & 7.4.3. Here also we have the same issue. So seems like we have this issue from 7.4.2 version. Masa 7.4.0 & 7.4.1 are working good. @guustnieuwenhuis @Matt Levine

Hi folks, my project is on Mura version 10.0.610.04. Reading the tea leaves, I expect my client will mandate a phase-out of closed-source software in the future. Of course when we selected Mura, it had been open-source, alas... What bumps in the road might we expect with a migration to Masa? Also, I haven't been tracking Masa too closely: How's the fork doing? What's the community opinion on Masa? (Any criticisms I should know about?)

We are thrilled to announce the release of Masa CMS version 7.4.4! While this update may be categorized as minor, it brings several improvements and bug fixes that contribute to a smoother and more efficient user experience. You can find all the details in the release notes on GitHub. https://github.com/MasaCMS/MasaCMS/discussions/238

Edit: Did a Core upgrade on another site and copied the url (http://..../admin/?muraAction=cSettings.list&action=updateCore&csrf_token....) into my local one, this seems to have worked - went to 7.4.0 first and then to 7.4.4. no problem! --- original msg --- Perhaps I missed some change log on Masa - I believe I was on 7.2.x and upgraded to 7.4.x? - I am not 100% but I believe it changed something so I can no longer access the /admin (it forwards to http://127.0.0.1:50628/?muraAction=clogin.main (my local dev commandbox machine) but stays on the "front end" and I see no admin bar either - any quick ideas? Cheers!

Does anybody know if/which US governmental organizations use Masa?

Hi Guust, is Masa CMS in it's latest release OK to run on the production release of Lucee 6.x? Or is it better to hold off on Lucee 6 for Masa CMS for the time being? Cheers & have a good week.

Hi team, am new to masacms. What is the exact way to retrieve the customized table ( created in SSMS ) data in MASA? Please advise, thanks.

Does anyone have Masa 7.4.2 running on Adobe Coldfusion 2021 in Command Box? We have a project currently on 2016 but when switching server to 2021 we get the following error:

500 Error
Element SETTINGSBUNDLEBEAN is undefined in a CFML structure referenced as part of an expression.
Type:Expression
coldfusion.runtime.UndefinedElementException: Element SETTINGSBUNDLEBEAN is undefined in a CFML structure referenced as part of an expression.
	at coldfusion.runtime.CfJspPage.ArrayGetAt(CfJspPage.java:1637)
	at coldfusion.runtime.CfJspPage._arrayGetAt(CfJspPage.java:1901)
	at coldfusion.runtime.CfJspPage._arrayGetAt(CfJspPage.java:1853)
	at cfioc2ecfc1631391981$funcADDALIAS.runFunction(/Users/mgallon/sites/rocss/core/mura/bean/ioc.cfc:68)
	at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:629)
	at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:559)
	at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:522)
	at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95)
	at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:469)
	at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:444)
	at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:316)
	at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:975)
	at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:696)
	at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:503)
	at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:4257)
	at coldfusion.runtime.CfJspPage._invoke(CfJspPage.java:4220)
	at cfonApplicationStart_include2ecfm250079727._factor31(/Users/mgallon/sites/rocss/core/appcfc/onApplicationStart_include.cfm:351)
	at cfonApplicationStart_include2ecfm250079727._factor48(/Users/mgallon/sites/rocss/core/appcfc/onApplicationStart_include.cfm:129)
	at cfonApplicationStart_include2ecfm250079727.runPage(/Users/mgallon/sites/rocss/core/appcfc/onApplicationStart_include.cfm:1)
	at coldfusion.runtime.CfJspPage.invoke(CfJspPage.java:257)
	at coldfusion.tagext.lang.IncludeTag.handlePageInvoke(IncludeTag.java:749)
	at coldfusion.tagext.lang.IncludeTag.doStartTag(IncludeTag.java:578)
	at coldfusion.runtime.CfJspPage._emptyTcfTag(CfJspPage.java:5195)
	at cfonApplicationStart_method2ecfm1432814222$funcONAPPLICATIONSTART.runFunction(/Users/mgallon/sites/rocss/core/appcfc/onApplicationStart_method.cfm:81)
	at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:629)
	at coldfusion.filter.SilentFilter.invoke(SilentFilter.java:47)
	at coldfusion.runtime.UDFMethod$ReturnTypeFilter.invoke(UDFMethod.java:559)
	at coldfusion.runtime.UDFMethod$ArgumentCollectionFilter.invoke(UDFMethod.java:522)
	at coldfusion.filter.FunctionAccessFilter.invoke(FunctionAccessFilter.java:95)
	at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:469)
	at coldfusion.runtime.UDFMethod.runFilterChain(UDFMethod.java:444)
	at coldfusion.runtime.UDFMethod.invoke(UDFMethod.java:316)
	at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:975)
	at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:696)
	at coldfusion.runtime.TemplateProxy.invoke(TemplateProxy.java:503)
	at coldfusion.runtime.AppEventInvoker.invoke(AppEventInvoker.java:115)
	at coldfusion.runtime.AppEventInvoker.onApplicationStart(AppEventInvoker.java:238)
	at coldfusion.filter.ApplicationFilter.invoke(ApplicationFilter.java:436)
	at coldfusion.filter.RequestMonitorFilter.invoke(RequestMonitorFilter.java:43)
	at coldfusion.filter.MonitoringFilter.invoke(MonitoringFilter.java:40)
	at coldfusion.filter.PathFilter.invoke(PathFilter.java:162)
	at coldfusion.filter.IpFilter.invoke(IpFilter.java:45)
	at coldfusion.filter.ExceptionFilter.invoke(ExceptionFilter.java:97)
	at coldfusion.filter.ClientScopePersistenceFilter.invoke(ClientScopePersistenceFilter.java:28)
	at coldfusion.filter.BrowserFilter.invoke(BrowserFilter.java:38)
	at coldfusion.filter.NoCacheFilter.invoke(NoCacheFilter.java:60)
	at coldfusion.filter.GlobalsFilter.invoke(GlobalsFilter.java:38)
	at coldfusion.filter.DatasourceFilter.invoke(DatasourceFilter.java:22)
	at coldfusion.filter.CachingFilter.invoke(CachingFilter.java:62)
	at coldfusion.CfmServlet.service(CfmServlet.java:231)
	at coldfusion.bootstrap.BootstrapServlet.service(BootstrapServlet.java:311)
	at io.undertow.servlet.handlers.ServletHandler.handleRequest(ServletHandler.java:74)
	at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:129)
	at coldfusion.monitor.event.MonitoringServletFilter.doFilter(MonitoringServletFilter.java:46)
	at coldfusion.bootstrap.BootstrapFilter.doFilter(BootstrapFilter.java:47)
	at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:67)
	at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
	at org.cfmlprojects.regexpathinfofilter.RegexPathInfoFilter.doFilter(RegexPathInfoFilter.java:47)
	at io.undertow.servlet.core.ManagedFilter.doFilter(ManagedFilter.java:67)
	at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java:131)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at com.intergral.fusionreactor.j2ee.filterchain.WrappedFilterChain.doFilter(WrappedFilterChain.java:134)
	at com.intergral.fusionreactor.j2ee.filter.FusionReactorRequestHandler.doNext(FusionReactorRequestHandler.java:698)
	at com.intergral.fusionreactor.j2ee.filter.FusionReactorRequestHandler.doHttpServletRequest(FusionReactorRequestHandler.java:256)
	at com.intergral.fusionreactor.j2ee.filter.FusionReactorRequestHandler.doFusionRequest(FusionReactorRequestHandler.java:119)
	at com.intergral.fusionreactor.j2ee.filter.FusionReactorRequestHandler.handle(FusionReactorRequestHandler.java:736)
	at com.intergral.fusionreactor.j2ee.filter.FusionReactorCoreFilter.doFilter(FusionReactorCoreFilter.java:36)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at com.intergral.fusionreactor.j2ee.filterchain.WrappedFilterChain.doFilter(WrappedFilterChain.java:71)
	at sun.reflect.NativeMethodAccessorImpl.invoke0(Native Method)
	at sun.reflect.NativeMethodAccessorImpl.invoke(NativeMethodAccessorImpl.java:62)
	at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43)
	at java.lang.reflect.Method.invoke(Method.java:498)
	at com.intergral.fusionreactor.agent.filter.FusionReactorStaticFilter.doFilter(FusionReactorStaticFilter.java:54)
	at com.intergral.fusionreactor.agent.pointcuts.NewFilterChainPointCut$1.invoke(NewFilterChainPointCut.java:50)
	at io.undertow.servlet.handlers.FilterHandler$FilterChainImpl.doFilter(FilterHandler.java)
	at io.undertow.servlet.handlers.FilterHandler.handleRequest(FilterHandler.java:84)
	at io.undertow.servlet.handlers.security.ServletSecurityRoleHandler.handleRequest(ServletSecurityRoleHandler.java:62)
	at io.undertow.servlet.handlers.ServletChain$1.handleRequest(ServletChain.java:68)
	at io.undertow.servlet.handlers.ServletDispatchingHandler.handleRequest(ServletDispatchingHandler.java:36)
	at runwar.undertow.SSLClientCertHeaderHandler.handleRequest(SSLClientCertHeaderHandler.java:144)
	at io.undertow.servlet.handlers.RedirectDirHandler.handleRequest(RedirectDirHandler.java:68)
	at io.undertow.servlet.handlers.security.SSLInformationAssociationHandler.handleRequest(SSLInformationAssociationHandler.java:117)
	at io.undertow.servlet.handlers.security.ServletAuthenticationCallHandler.handleRequest(ServletAuthenticationCallHandler.java:57)
	at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
	at io.undertow.security.handlers.AbstractConfidentialityHandler.handleRequest(AbstractConfidentialityHandler.java:46)
	at io.undertow.servlet.handlers.security.ServletConfidentialityConstraintHandler.handleRequest(ServletConfidentialityConstraintHandler.java:64)
	at io.undertow.security.handlers.AuthenticationMechanismsHandler.handleRequest(AuthenticationMechanismsHandler.java:60)
	at io.undertow.servlet.handlers.security.CachedAuthenticatedSessionHandler.handleRequest(CachedAuthenticatedSessionHandler.java:77)
	at io.undertow.security.handlers.AbstractSecurityContextAssociationHandler.handleRequest(AbstractSecurityContextAssociationHandler.java:43)
	at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
	at io.undertow.servlet.handlers.SendErrorPageHandler.handleRequest(SendErrorPageHandler.java:52)
	at io.undertow.server.handlers.PredicateHandler.handleRequest(PredicateHandler.java:43)
	at io.undertow.servlet.handlers.ServletInitialHandler.handleFirstRequest(ServletInitialHandler.java:275)
	at io.undertow.servlet.handlers.ServletInitialHandler.access$100(ServletInitialHandler.java:79)
	at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:134)
	at io.undertow.servlet.handlers.ServletInitialHandler$2.call(ServletInitialHandler.java:131)
	at io.undertow.servlet.core.ServletRequestContextThreadSetupAction$1.call(ServletRequestContextThreadSetupAction.java:48)
	at io.undertow.servlet.core.ContextClassLoaderSetupAction$1.call(ContextClassLoaderSetupAction.java:43)
	at io.undertow.servlet.api.LegacyThreadSetupActionWrapper$1.call(LegacyThreadSetupActionWrapper.java:44)
	at io.undertow.servlet.handlers.ServletInitialHandler.dispatchRequest(ServletInitialHandler.java:255)
	at io.undertow.servlet.handlers.ServletInitialHandler.access$000(ServletInitialHandler.java:79)
	at io.undertow.servlet.handlers.ServletInitialHandler$1.handleRequest(ServletInitialHandler.java:100)
	at io.undertow.server.Connectors.executeRootHandler(Connectors.java:393)
	at io.undertow.server.HttpServerExchange$1.run(HttpServerExchange.java:852)
	at org.jboss.threads.ContextClassLoaderSavingRunnable.run(ContextClassLoaderSavingRunnable.java:35)
	at org.jboss.threads.EnhancedQueueExecutor.safeRun(EnhancedQueueExecutor.java:2019)
	at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.doRunTask(EnhancedQueueExecutor.java:1558)
	at org.jboss.threads.EnhancedQueueExecutor$ThreadBody.run(EnhancedQueueExecutor.java:1423)
	at org.xnio.XnioWorker$WorkerThreadFactory$1$1.run(XnioWorker.java:1282)
	at java.lang.Thread.run(Thread.java:748)

Your Masa tip of the week. Or something. 🙂 https://southofshasta.com/blog/how-to-set-the-release-date-on-masa-cms-content-en-masse-with-the-feed-api/

I just got the buildui.com course/components to read up on and watch over the holidays. There is so much about beautiful UI elements that I know a few clients want, but I am a complete React beginner. Can anyone around here point me to something along the lines of "Here's how to gradually use react components and react server components alongside a CFML (Masa CMS / ...) website? I want to avoid obvious mistakes, the CFML sites I run via CommandBox (undertow/NGINX) on Ubuntu 18/20, and in an ideal world I would simply like to gradually move some of the forms, list views etc. over from "boring static" elements to something more modern looking - and buildui looks the part to me. Happy holidays and many thanks for any pointers, maybe I am lucky and someone here has done something similar or knows "where to look".

Take a look at : https://github.com/jonathanyip/simple-cf-app & https://teratech.com/wp-content/uploads/2019/05/ColdFusion__ReactJS.pdf

In

Masa 7.2

how do I pass custom CSS and styles to the CKEditor?

I have a client who wants an external link to his YouTube channel to be displayed in the drop-down menu and, when clicked, open a new tab. I am not sure it is possible, but if anyone has any ideas, it would be very helpful. Thank you.

Added a form (works fine) to a page and then added a file upload and tried submitting a 4 MB JPG file. It took a while but worked fine on the website. THe delivered form response via email however contains a download lik, which then says file or directory does not exist: Column: 0 ID: ?? Line: 265 Raw Trace: content.file.processimgcfimage_cfc$cf.udfCall(/mura/content/file/processImgCfimage.cfc:265) Template: /var/www/siteID/core/mura/content/file/processImgCfimage.cfc Type: cfml This is with Masa CMS 7.3.3, woudl this work in 7.4 perhaps? Or is it "some permission issue"? Any ideas? Thanks!

Hello. Are there any instructions available to upgrade from v7.2.7 to the latest version? Can we jump from 7.2 to 7.4.4 directly and are there any db updates involved?

Heads-up -- details on the Mura/Masa CMS vulnerabilities that were patched a couple weeks ago are now public - https://blog.projectdiscovery.io/hello-lucee-let-us-hack-apple-again/. Patch now if you haven't already.

In Mura, forms are dynamically build with

mura.js

or

mura.min.js

. In the release notes for Masa I see under

7.4.0

the remark

reviewed form module

What does this mean? Has there been a rehaul? The rendering from within the

.js

makes it very difficult to customize some settings (e.g. adding an

auto-complete

or

aria-label

attribute).

Hi Joost, in 7.4.0 we introduced new modules and we’ve tested and reviewed the existing ones.

I would have to dig deep to check if we changed something to the forms module. But if we just mentioned a “review”, I don’t think that was the case.

Hi Guust, ok thanks. Am i correct in my assumption that all formbuilding is done from within in the

.js

files?

@ehoffman has left the channel