Gregory's Blog

Security related posts

Bypassing ColdFusion and Lucees Global Script Protection When Designing a Content Management System

Bypassing ColdFusion and Lucees Global Script Protection When Designing a Content Management System


ColdFusion and Lucee's Global Script Protection is designed to discourage cross-site scripting attacks by replacing scripts and other potentially harmful tags in forms before sending the data to the server. However, sometimes, this can get in the way, especially when trying to develop a content management system.
Read More...