tracker issue : CF-4198764

select a category, or use search below
(searches all categories and all time range)
Title:

ColdFusion 11 update 11/12 losses CFTOKEN

| View in Tracker

Status/Resolution/Reason: Closed/Fixed/Fixed

Reporter/Name(from Bugbase): / ()

Created: 05/24/2017

Components: Core Runtime, Session Management

Versions: 2016,11.0

Failure Type: Incorrectly functioning

Found In Build/Fixed In Build: update 11/12 / HF5,HF13

Priority/Frequency: Normal / Some users will encounter

Locale/System: /

Vote Count: 0

Listed in the version 2016.0.05.303689 Issues Fixed doc
Problem: ColdFusion 11 update 11/12 losses CFTOKEN

Method: When loading the template for the first time after applying update 11/12. It does display the CFTOKEN however with the second refresh it disappears. 

Reproduce using below code. Attached 2 screenshots.

1. with update 10- clearly shows the CFTOKEN
2. with update 11/12- after the second refresh- it loses the CFTOKEN.

application.cfm:
<CFAPPLICATION NAME="dutyweb" CLIENTMANAGEMENT="Yes"  SESSIONMANAGEMENT="Yes" SESSIONTIMEOUT="#CreateTimeSpan(0,0,20,0)#" APPLICATIONTIMEOUT="#CreateTimeSpan(2,0,0,0)#">
<cfset application.siteroot="">
<cfif isDefined("cookie.CFID") and isDefined("cookie.CFTOKEN")>
 <cfcookie name="cfid" value="#cookie.cfid#">
  <cfcookie name="cftoken" value="#cookie.cftoken#">
</cfif>
<cfcookie name="WT_FPC"  expires=1>


test.cfm
<cfdump var="#cookie#">


Result: It is losing the CFTOKEN

Expected: It should not lose the token

Workaround: N/A

Note:

Attachments:

Comments:

The fix is verified and will be available in the upcoming ColdFusion update. Thanks!
Comment by S P.
680 | August 29, 2017 09:19:56 AM GMT