If you are a ColdFusion host and want good ColdFusion Developers to use your service DO NOT Disable CreateObject. You can disable COM, CORBA, and JAVA. We need to be able to use CFC's and I can not use ColdBox on my host currently due to this issue.
How to select a ColdFusion hosting provider
CreateObject: This function should be disabled as it can be used create Java and COM objects that can compromise the server's security. New in ColdFusion MX 7 is the ability to specify the types of objects to disallow with the choices being COM, CORBA, JAVA, and WEBSERVICE. The COM, CORBA, and JAVA variants of the CreateObject function should be disabled, thus leaving room for CFC and web services as required.
|
clipped from www.adobe.com
No comments:
Post a Comment