Showing posts with label Henry Ho. Show all posts
Showing posts with label Henry Ho. Show all posts
Tuesday, 15 July 2014

Query.cfc et al functions have file-reads and server-wide exclusive locks buried in their code

›
G'day: Today's muse is Henry, with this Twitter status message: #coldfusion sandbox security requires FileRead() because some c...
Monday, 30 June 2014

Adobe apparently cease development and/or support of UI tags in ColdFusion

›
G'day: I didn't want to put a question mark on that for the traditional reasons. However it seems this might be true. At last. Th...
Wednesday, 9 April 2014

Ye Olde XMLSearche Bugge

›
G'day: Henry mentioned this last night: XMLSearch() is not thread safe since CF7 http://t.co/ubz29eJOOt #coldfusion Just encounter...
Tuesday, 9 July 2013

Well done Adobe ColdFusion Team

›
G'day: Hopefully you've heard there's a patch out for ColdFusion 10 (now version 10.0.11) for the web sockets security hole th...
Wednesday, 3 July 2013

Official confirmation: Adobe is on the case regarding ColdFusion 10's web sockets security issue

›
G'day: SSIA, really. But you know me: I can pad 14 words of information out to take 1400 words to say... This is in reference to the...
Sunday, 30 June 2013

Web socket security issue: risk assessment & findings

›
G'day: Yesterday I engaged in some unrepentant shock tactics, writing an article entitled " Security warning: stop using ColdFusio...
Saturday, 21 July 2012

Which is better: having your methods inline in a CFC, or included from a separate file? (cont'ed)

›
This is just a reply to Henry, Shawn and Dave regarding my earlier posting on this topic , but as it's longer than 4kB, I cannot post it...