displaying top 100 results
, APSB20-18. Please update your ColdFusion versions today. Let […]
The post ColdFusion (2018 release) Update 9 and ColdFusion (2016 release) Update 15 released appeared first on ColdFusion. Blog,CF2018 Updates,coldfusion 2016 update 14,coldfusion 2018 update 9,coldfusion samesite attribute
Tracker Issue Add SameSite Cookie Support to ColdFusion
Add SameSite Cookie Support to ColdFusion
Tracker Issue CFCookie "samesite" support
4123109 CF-4201688 Language : Cookie James Moberg CFCookie "samesite" support I'd like to use the "samesite" cookie attribute w/CFCookie. (I would prefer not to have to write my own handler because I've encountered issues where setting a cookie wouldn't make it available to the ColdFusion
Tracker Comment Comment on CFCookie "samesite" support by Rafael S.
4123109 CF-4201688 Rafael S. Chrome is starting to require the samesite attribute
Addressing SameSite cookie issues, before Adobe offers an update that does
Tracker Comment Comment on CFCookie "samesite" support by Edwin S.
4123109 CF-4201688 Edwin S. Hi Gerald,
We are adding header from our side. If it is not being honoured, then Websphere might be processing the Set-Cookie headers to remove unexpected attributes. So they need to support as well
Few application servers(including Tomcat) do not support samesite
Comment on Add SameSite Cookie Support to ColdFusion by Vamseekrishna N.
Tracker Comment Comment on CFCookie "samesite" support by Peter F.
="lax/strict";
There should also be a CF Administrator setting to do the same.
The CFCookie tag should support the samesite attribute, eg:
or
Info:
https://www.owasp.org/index.php/SameSite
Spec: https://tools.ietf.org/html/draft-west-first-party-cookies-07
Browser Support: https://caniuse.com/#search=samesite
Tracker Comment Comment on CFCookie "samesite" support by A. B.
4123109 CF-4201688 A. B. Could it be that ColdFusion 2018 implicitly supports samesite cookies? After all, ColdFusion 2018 runs on Tomcat 9.0.21, and this version of Tomcat has support for samesite cookies. See https://tomcat.apache.org/tomcat-8.5-doc/config/cookie-processor.html
You would
Tracker Comment Comment on CFCookie "samesite" support by James M.
posted it as a blog post. (This happened recently on the Adobe Community Forums too.) As a workaround, we're using a UDF to generate a "samesite" cookie.
https://gamesover2600.tumblr.com/post/188744661844/coldfusion-setcookie-udf-supports-samesite
Tracker Comment Comment on CFCookie "samesite" support by James M.
4123109 CF-4201688 James M. Hopefully "samesite", which is supported by 86.57% of browsers, will be implemented in ColdFusion 2016 before end-of-core on 2/17/2021. I was hoping that it would have been included in today's CF2016 patch 11, but didn't realize that Tomcat was the dependency
Tracker Comment Comment on CFCookie "samesite" support by Gerald D.
believe that is used on Tomcat. It doesn't appear that the samesite attribute of cfcookie works.
Example:
Cookie Result:
NAME: AMWEBJCT!%2Fjrtlappsdev!TEST VALUE: abc123 SAMESITE is empty
Thanks.
Tracker Comment Comment on CFCookie "samesite" support by James M.
4123109 CF-4201688 James M. This 3/24/2020 patch introduces a new bug. This throws an "The tag handler cookie does not have a setter for the attribute samesite specified in the Tag Library Descriptor." error. (This leads me to believe that the functionality wasn't fully tested in any production
Tracker Comment Comment on CFCookie "samesite" support by James M.
4123109 CF-4201688 James M. Chrome's "samesite" browser update is in 20 days. Will the "next update" be released before or after all Adobe ColdFusion platforms that use a back-end ColdFusion API with different hostname are negatively impacted?
Here's an article regarding it that was published 1
Tracker Comment Comment on Add SameSite Cookie Support to ColdFusion by Peter F.
Comment on Add SameSite Cookie Support to ColdFusion by Peter F.
Tracker Comment Comment on CFCookie "samesite" support by Toby W.
Comment on CFCookie "samesite" support by Toby W.
Tracker Issue ClassCastException for gateway attribute value
5344961 CF-4204013 Event Gateway ClassCastException for gateway attribute value Problem Description:
We used an attribute of type integer in calling a ColdFusion event gateway. So far, it has worked without problems in every version of ColdFusion until now.
Unlike previous ColdFusion versions
Tracker Issue encodeFor attribute for cfoutput, writeOutput
2612744 CF-3434473 Security David Epler encodeFor attribute for cfoutput, writeOutput While ColdFusion 10 added the various ESAPI encodeFor* functions, it is dependent upon the developer to properly wrap location where used with the appropriate function (e.g. #EncodeForHTML(url.name)#). Adding
Tracker Issue Enabling Roles attribute for CFCOMPONENT
2673584 CF-4126377 Security Sathish Kumar Enabling Roles attribute for CFCOMPONENT Duplicate ID: CF-4126370
Hi Guys,
The roles attribute for coldfusion functions is good at security application functionalities from unauthorised users. It would be great if we can possibly extend this feature
Tracker Issue Enabling Roles attribute for CFCOMPONENT
2673587 CF-4126372 Security Sathish Kumar Enabling Roles attribute for CFCOMPONENT Duplicate ID: CF-4126370
Hi Guys,
The roles attribute for coldfusion functions is good at security application functionalities from unauthorised users. It would be great if we can possibly extend this feature
Tracker Issue Enabling Roles attribute for CFCOMPONENT
2673588 CF-4126370 Security Sathish Kumar Enabling Roles attribute for CFCOMPONENT Hi Guys,
The roles attribute for coldfusion functions is good at security application functionalities from unauthorised users. It would be great if we can possibly extend this feature to the CFCOMPONENT tag as well
Tracker Comment Comment on Invalid Set-Cookie Header Date Format by James M.
"samesite" and provides support to older versions of ColdFusion.
https://gamesover2600.tumblr.com/post/188744661844/coldfusion-setcookie-udf-supports-samesite
(NOTE: It generates 2 cookies so that 1) the CF "cookie" scope is updated and 2) the cookie is sent in a valid manner to the browser.)
queryNew rowData attribute does not accept coldfusion.runtime.ArgumentCollection
Portal Comment Comment on ColdFusion (2018 release) Update 8 and ColdFusion (2016 release) Update 14 released by James Moberg
Comment on ColdFusion (2018 release) Update 8 and ColdFusion (2016 release) Update 14 released by James Moberg
Tracker Issue False positive for missing CFPDFParam source attribute
CFPDFParam
Actual Result:
"ColdFusion 2016 has modified the usage of CFPDFParam tag. The attribute source is now a required attribute."
Expected Result:
None (pass)
Any Workarounds:
Bug 80504:Implicit setter wrongfully validates attribute 'type', when it should only validates attribute 'validate'// in myObject
Tracker Comment Comment on CFCookie "samesite" support by James M.
Comment on CFCookie "samesite" support by James M.
Tracker Comment Comment on CFCookie "samesite" support by luke m.
Comment on CFCookie "samesite" support by luke m.
Tracker Comment Comment on CFCookie "samesite" support by James M.
Comment on CFCookie "samesite" support by James M.
Tracker Issue CFCHART - "Marker" tag attribute throws error
2821311 CF-4198300 Language : Tags spencer schultz CFCHART - "Marker" tag attribute throws error Problem Description: While using CFCHART the "Marker" tag attribute throws an error stating it's not a valid attribute. This is a valid attribute listed in the ColdFusion documents https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion
Tracker Issue Number value changed by cfsqltype attribute
Number value changed by cfsqltype attribute
Tracker Issue New order attribute for query loops
different order.
So passing in an order attribute to a query loop would make ColdFusion create and sort a temporary copy of the query ( or more performantly: an independent collection of keys and values which it would sort and then use as a translation key during the iteration to pull from
Tracker Issue Bring the dbvarname attribute back for cfprocparam
Bring the dbvarname attribute back for cfprocparam
Tracker Issue Mapping a many-to-one ignores the column attribute
2597092 CF-3122013 ORM Support Dave DuPlantis Mapping a many-to-one ignores the column attribute Problem Description: When creating a many-to-one relationship between objects, the column attribute is not passed from ColdFusion to Hibernate, so it is not possible to map anything on the many side
, but there needs to be a backwards compatibility mode with the old libraries for code written in coldfusion 8. Attempted Workaround:CFAJAXIMPORT with a scriptscr attribute pointing to the old libraries does not work completely.
Method:
Examples:Firefox, createWindow() function, the "center" attribute
Comment on documentation of cfschedule's onException attribute by Jacob J.
Tracker Comment Comment on result attribute for cfinsert by Vamseekrishna N.
Comment on result attribute for cfinsert by Vamseekrishna N.
cachedWithin attribute no longer working on ColdFusion 11 Update 18
Comment on CFUPDATE support for fetchClientInfo attribute by Frank J.
declaration take precedence over the values set in the comment section. Therefore, if you set an attribute, such as a hint in both locations, ColdFusion ignores the value in the comment section and uses only the one in the element declaration.".
Note: Lucee correctly behaves as per that doc, but CF throws
2608583 CF-4058796 Core Runtime Joe Chastain requestTimeout attribute of cfsetting tag not working in Application.cfc Problem Description: Previous to ColdFusion 11, the 'requestTimeout' attribute of the cfsetting tag was working in Application.cfc without needing to be in the 'on
5685677 CF-4204290 File Management : CFFile ContinueOnError attribute does not work with CFFILE action=upload or FileUpload() Problem Description:
The documentation lists "ContinueOnError" as a supported attribute when using action=upload. However, it doesn't work in CF11 or CF2016.
https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion
Comment on CFUPDATE support for fetchClientInfo attribute by External U.
2613669 CF-3193632 Documentation Ron Stewart Missing "width" attribute in CFCHART attributes in new features guide The previously-published CF10 "new features guide" at http://www.adobe.com/support/documentation/en/coldfusion/10/cf10betafe atures.pdf includes a description of the CFCHART
Tracker Issue Bug 79599:There is no ALT attribute on the DateChooser
2599725 CF-3039786 Accessibility David Epler Bug 79599:There is no ALT attribute on the DateChooser Problem:
There is no ALT attribute on the DateChooser.png when using . This causes 508 audit to fail. Bug #79003 mentions adding ALT attribute for type="autosuggest". This also occurs in ColdFusion
Tracker Issue TipStyle attribute will not change from default value
TipStyle attribute will not change from default value
Bug 86940:-(Watson Migration Closure)Remove attribute of cfmail is always true
Comment on encodeFor attribute for cfoutput, writeOutput by External U.
[ANeff] Doc Bug for: cfindex action attribute description issues
use cases in software development that require the CFC to be outside the web root.
Method:
Put the cfc to be proxied, proxy.cfc, in any directory off the webroot, for example, c:\temp\test\proxy.cfc.The following values for the cfc attribute fail. In each case Coldfusion tells you it cannot find
CFGRIDCOLUMN HREF attribute not binding with column returned from CFC
Requesting cfgrid using bind attribute generates Ext.data.reader.Reader error
Comment on cfquery datasource attribute leak / scoping issue by Akhila K.
Tracker Comment Comment on [ANeff] Doc Bug for: cfftp systemtype attribute undocumented by Vamseekrishna N.
Comment on [ANeff] Doc Bug for: cfftp systemtype attribute undocumented by Vamseekrishna N.
Comment on [ANeff] Doc Bug for: cfftp systemtype attribute undocumented by S P.
Comment on Bind does not find elements by ID attribute in CFSELECT by External U.
Tracker Comment Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Charlie A.
Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Charlie A.
Tracker Comment Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Charlie A.
Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Charlie A.
Comment on CFChart style attribute errors when passing json string by CFwatson U.
Tracker Comment Comment on Domain attribute of cfcookie is always trimmed to .domain.tld by External U.
Comment on Domain attribute of cfcookie is always trimmed to .domain.tld by External U.
Tracker Comment Comment on Domain attribute of cfcookie is always trimmed to .domain.tld by External U.
Comment on Domain attribute of cfcookie is always trimmed to .domain.tld by External U.
Tracker Comment Comment on datasource attribute on <cfinsert> should no longer be required by Adam C.
Comment on datasource attribute on should no longer be required by Adam C.
Tracker Comment Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Nimit S.
Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Nimit S.
Tracker Comment Comment on Requesting cfgrid using bind attribute generates Ext.data.reader.Reader error by Mukesh K.
Comment on Requesting cfgrid using bind attribute generates Ext.data.reader.Reader error by Mukesh K.
Tracker Issue <Regression> CacheRemove throws an exception when one or more queries do not have cacheId attribute
4901051 CF-4203360 Core Runtime Any Servlet filter that doesn't have the pattern attribute causes startup to fail Problem Description: If a Tomcat valve is added to server.xml (such as mod_cfml) and it lacks the attribute "pattern", Coldfusion will fail on startup with on ServerConfigParser.fixAttribute
Tracker Issue An empty CFHTTP useragent attribute forces use of "Apache-HttpClient/4.3.5 (java 1.5)"
2609069 CF-3938424 Net Protocols : HTTP James Moberg An empty CFHTTP useragent attribute forces use of "Apache-HttpClient/4.3.5 (java 1.5)" Problem Description:
Perform a CFHTTP GET or POST request with an empty useragent. If the parameter is omitted, it defaults to "ColdFusion". It an empty
Tracker Comment Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by dakota c.
Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by dakota c.
Tracker Comment Comment on ORM: has<property>() doesn't take the property's where attribute into account by Nimit S.
Comment on ORM: has() doesn't take the property's where attribute into account by Nimit S.
Tracker Comment Comment on [ANeff] Bug for: cfsharepoint's ntlmdomain attribute shouldn't be required by CFwatson U.
Comment on [ANeff] Bug for: cfsharepoint's ntlmdomain attribute shouldn't be required by CFwatson U.
Tracker Comment Comment on [ANeff] Bug for: thread attribute variables unusable in cfhtmltopdf/cfdocument header/footer by CFwatson U.
Comment on [ANeff] Bug for: thread attribute variables unusable in cfhtmltopdf/cfdocument header/footer by CFwatson U.
Tracker Comment Comment on An empty CFHTTP useragent attribute forces use of "Apache-HttpClient/4.3.5 (java 1.5)" by External U.
Comment on An empty CFHTTP useragent attribute forces use of "Apache-HttpClient/4.3.5 (java 1.5)" by External U.
Comment on CFChart style attribute errors when passing json string by External U.
Comment on Bring the dbvarname attribute back for cfprocparam by External U.
Tracker Comment Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Charlie A.
Comment on cachedWithin attribute no longer working on ColdFusion 11 Update 18 by Charlie A.
Tracker Comment Comment on Requesting cfgrid using bind attribute generates Ext.data.reader.Reader error by Shigeyoshi M.
Comment on Requesting cfgrid using bind attribute generates Ext.data.reader.Reader error by Shigeyoshi M.
Tracker Comment Comment on Domain attribute of cfcookie is always trimmed to .domain.tld by External U.
2611771 CF-3593673 External U. http://stackoverflow.com/questions/17583768/why-doesnt-cfcookie-allow-setting-domain-to-a-subdomain
http://stackoverflow.com/questions/17202403/coldfusion-10-cfcookie-not-honoring-domain-attribute
Tracker Issue Erratic behaviour in file-download code when there is an error in a cfcontent attribute
6627694 CF-4206502 File Management Erratic behaviour in file-download code when there is an error in a cfcontent attribute Problem Description:
Consider the usual ColdFusion file-download code involving cfheader and cfcontent. Suppose there happens to be an error in either of cfcontent
Tracker Issue [ANeff] Doc Bug for: cfindex's merge action and collectionNames attribute undocumented
="MyCollection")
5) Exception: "When the value of the ACTION attribute is MERGE, it requires the attribute(s): COLLECTIONNAMES"
Actual Result: undocumented
Expected Result: documented
URL: https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-i/cfindex.html
Tracker Comment Comment on Missing "width" attribute in CFCHART attributes in new features guide by Aaron N.
2613669 CF-3193632 Aaron N. Hi Adobe,
I've verified this is fixed.
However, the "Syntax" (https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-c/cfchart.html#Syntax) section still needs fixed. All attributes, in Syntax, are alphabetical (good) except for the "width" attribute
Tracker Issue Bug 80610:When trying to use the ternary operator in the default attribute of a cfargument it dies a horrible death
Bug 80610:When trying to use the ternary operator in the default attribute of a cfargument it dies a horrible death
Tracker Issue Persistent components shall not need a persistent or embeddable attribute when a mapping file is defined
/embeddable attributes have to be defined on a component despite the fact that a mapping file exists.
Steps to Reproduce:
Create an Hibernate mapping file for a component, but do not add persistent="true" in the component's definition.
Actual Result:
coldfusion
Tracker Comment Comment on exception.log not updated when eventhandler="" attribute is specified and task throws exception by CFwatson U.
Comment on exception.log not updated when eventhandler="" attribute is specified and task throws exception by CFwatson U.
Tracker Comment Comment on CFINDEX can't make up its mind which ACTION attribute it wants me to use by Jack D.
Comment on CFINDEX can't make up its mind which ACTION attribute it wants me to use by Jack D.
Tracker Comment Comment on requestTimeout attribute of cfsetting tag not working in Application.cfc by External U.
Comment on requestTimeout attribute of cfsetting tag not working in Application.cfc by External U.
Comment on Bring the dbvarname attribute back for cfprocparam by External U.
Tracker Comment Comment on cfinput datefield will not show attribute value after applying cf11 update 12 by Andrea D.
Comment on cfinput datefield will not show attribute value after applying cf11 update 12 by Andrea D.
2609959 CF-3741004 Language ext-user SerializeJSON on an ORM query skips a comma after every struct attribute Problem:
SerializeJSON on an ORM query skips a comma after every struct attribute
Method:
Run the test case
cfsuite/coldfusion
Tracker Comment Comment on [ANeff] Bug for: cacheRemove(cacheGetAllIds()) throws attribute validation exception by External U.
Comment on [ANeff] Bug for: cacheRemove(cacheGetAllIds()) throws attribute validation exception by External U.
Tracker Issue REST restPath attribute not supporting regex that defines restpath argument as optional
REST restPath attribute not supporting regex that defines restpath argument as optional
2608473 CF-4086564 Database Jason Steinshouer Using clientInfo attribute with cfquery does not pass this metadata to MS SQL server Problem Description:
When I create a structure and pass it to cfquery as described in the link below I do not see the metadata passed to our MS SQL server.
https://helpx.adobe.com/coldfusion/developing-applications/accessing-and-using-data/updating-your-database/database-related-enhancements-in-coldfusion
Tracker Issue [ANeff] Bug for: cfpdfparam(filename should default to filename from the source attribute
[ANeff] Bug for: cfpdfparam(filename should default to filename from the source attribute
Bug 80234:[ANeff] Doc Bug For: cfhttp's attributes table omits 'result' attribute
cfpdfform with name attribute makes the PDF unsignable in Reader DC
DBVARNAME attribute is not working as it is suppose to be
Tracker Comment Comment on The cfinclude attribute runonce not working inside components by James M.
Comment on The cfinclude attribute runonce not working inside components by James M.
Tracker Comment Comment on The accept attribute of cffile doesn't work with Microsoft Word DOCX files by Rupesh K.
2610565 CF-3695879 Rupesh K. There is of course a difference in the format between MS office and LibreOffice document which is causing the mimetype to differ.
Starting with ColdFusion 10, the accept attribute in ColdFusion 10 takes comma separated list of extensions or mimetypes. So
Tracker Issue Multiple child tasks fail to fire when the onComplete attribute contains spaces after the comma delimiter
Complete attribute causes the some of the child tasks not to fire.
Steps to Reproduce:
Here's an example that creates a parent task with two child tasks set to fire at the same time when the parent completes. Execute the code wait 1 min, then check the scheduler in the ColdFusion administrator and you'll see
Specifying the server="" attribute within cfobject crashes and restarts the ColdFusion server x64 (server="remote" is not working with 64-bit CF)
Tracker Comment Comment on The accept attribute of cffile doesn't work with Microsoft Word DOCX files by External U.
2610565 CF-3695879 External U. I documented everything at: http://steinbring.net/2014/coldfusion-cffiles-accept-attribute-does-not-work-right/. There are some screenshots that may or may not be helpful.