Hi all. I'm not sure this one would be allowed in cfml-general, so posting it here. Our CF based CMS platform blocks iframe tags from being submitted through the web editor and being used on web pages. We blocked this and other tags as possible security risks. However, iframes still seem to be used all over the place for embedding widgets in web pages. Is there a consensus on whether iframes are a security risk in CMS systems or web dev more generally?

Clients get annoyed that we block this by default, but we don't want to open up un-necessary security holes

Does anyone in here have any experience with GNU Mailman? Specifically, this is v 2.1.18-1. I am trying to figure out how to restart it. This is a Linux server (CentOS). I've tried what I found on the web but it didn't work.

Using this keyboard now > DasKeyboard 4 Ultimate I love it. And hate it sometimes. Might need to add 2-3 stickers on it to cheat for a while for some orientation as I need to switch between German, Swedish/Norwegian and well, US English and why square brackets and curlies and what not needed in programming are in wildly different places annoys me. 😬 Passwords are fun to type.. thank goodness for PW managers, lol.

Can anyone recommend a php version of trycf.com Looks like there's a bunch out there, wondering if anyone has a preference

Right, much simpler to use “#” and then just dynamically evaluate it… because NOTHING bad could EVER happen doing that.

I have written that code in loop form in the past. Not proud but it got the feature out and we then converted it to be better later.

i met a guy who worked in coldfusion and specially in 11 version he said to me, Application scopes are the most evil scopes and components should be used as included files how far this statement is true and guy is very old and lots of experience

Thinking of using an Elgato Stream Deck to (not only obviously, but additionally) assign client task logging to some buttons for easy reporting etc., anyone done this so a "keypress" (=keystrokes up to 500 characters + enter) for example is logged to a database via Coldfusion? one way could be to open a URL and send through a form I suppose, but there are probably more elegant solutions surely? Any cool ideas out there? :-)

Does anyone have any suggestions for load testing our application to verify it can handle large loads of users (20-50k) at a given time? We have been directed toward ALM but just curious what others are using in the CF world. Thanks!

My kingdom for a backslash... Just discovered that Google Analytics documentation breaks if you include a backlash at the end of the URL (as linked from search engines)

Supply chain issues aside, what are people's thoughts on laptop computer brands for doing dev work? We typically end up with Dells, but their battery life is awful. I'm thinking something in a 32GB memory, 1TB HDD model. HP is an option, but we are fairly limited in what we can buy and spend.

6 AM is too early to be coming across code like this…lol. Terrifying this person is ultimately processing credit cards.

I like this one https://www.reddit.com/r/shittymoviedetails/comments/t44jif/in_2015_president_zelens[…]arred_in_a_fictional/?utm_medium=android_app&utm_source=share

I'll just leave this picture of Putin riding a Harley-Davidson during a bike festival in the Ukraine with a Ukraine flag on it here...

No one asked but I'm going to write anyway 🙂 This photo 👆🏻is from my home town Sevastopol circa 2011. City of 300k people, of which 100k of elderly people with Soviet nostalgia. About 20k are Russian soldiers and Navy officers with families - because of naval base. But ~50% of people were like me and my family - not connected to Navy or interested in politics, with no wish to change anything. Around 2004-2005 Russia started to pump propaganda and sponsor pro-Russian NGOs to promote idea that Sevastopol is not a part of Ukraine (despite international agreements), but should be returned to Russia because of historic reasons. One of vehicles of that propaganda were Night Wolves bikers, they created 'bike-show' full of Soviet symbols near Sevastopol, which was fairly popular, a disney-land of sort. Never attended these, as I never considered USSR any kind of good thing to return, my great-grandfather was in GULAG on fake accusation.

This year's current contender for worst information graphic goes to this beautiful entry from the land of Crypto: https://web3isgoinggreat.com/?id=2022-03-15-3

It's time for a new mouse! A few years ago I got a Razer DeathAdder Elite that was programmable, worked with my home Mac and work Windows machines, and had the funky glowing lights that I didn't care about. Razer decided to stop supporting the Mac, so now I'm in the market for a new mouse. So I want one that has multiple, programmable buttons, (having a button dedicated to CF comments rocks), works equally well on Windows and Mac OS, and prefer corded USB but am open to wireless. Do any of you use such a mouse that you would recommend? Okay, funky glowing lights would be okay too.

This message was deleted.

in related news, apparently you can rent a llama.

my dell running windows 11 has been running like a dog since late last week, anyone else having pain?

nice code work heh 😉

<cfdocument format="flashpaper">

just going to leave that here, thanks.

I miss Macromedia...

the web.config file in IIS is where a lot of this kind of filtering goes on, so that may be a place to try and filter out these odd urls (ie anything that is not www or non-www).

anyone experienced covid, how it feels when once have it

Somebody left a mobile home on the side of the interstate so an enterprising individual made a Zillow listing for it. Austin real estate deals, you found them here first.

I bet I'm supposed to know this, but when I'm working in another app and/or on another machine, hear the little Slack alert sound, and come back here, what's the easiest way to find the conversation that just updated, across all channels I'm subscribed to, and all their potentially-threaded conversations?

The more I know about computers humans, the more amazed I am that they work at all.

FTFY