Title:
ColdFusion 2016 Security Enhancements: EncodeFor
|
View in Portal
ColdFusion 2016 added a handy enhancement to make writing secure CFML code easier for developers. This enhancement helps developers protect large chunks of code from a security vulnerability known as Cross Site Scripting or XSS. What is Cross Site Scripting? A cross site scripting vulnerability allows the attacker to execute client side code on the victim’s browser. In many cases the cross site scripting vulnerability can be used to exploit additional vulnerabilities or even leverage browser vulnerabilities to install malware on the victims […]
Comments: