ColdFusion allows administrators to restrict the use of certain tags if they feel that those tags could be abused or misused. These restrictions are global – they effect all applications, not specific or specifiable ones. But if you do need to override these restrictions for specific applications, ColdFusion 5 allows you to specify the names of directories in which tags may be used unsecured. By default this is only used for the ColdFusion Administrator program itself, but you could add your own directories there if needed. Of course, if you do so, make sure to secure those directories using OS or HTTP level security. (Applies to: ColdFusion 5 or later)

Leave a Reply