Note: I should have pointed out that all this is built into ColdFusion. There is no downloading, installing, or configuring.
Introduction
Any input that your website accepts has to treated as if it were hostile and / or malformed. The Open Web Applications Security Project (OWASP) has a collection of recommendations and Java utilities to help protect against these threats. ColdFusion, being powered by Java, also has these functions. Use them!
- https://github.com/jmohler1970/Owasp
- https://github.com/ESAPI/esapi-java
- https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-functions/functions-c-d/Canonicalize.html
-
The post Open Web Application Security Project – OWASP appeared first on ColdFusion.