Modernize or Die ® Podcast

2024-04-30 Weekly News - Episode 215

Watch the video version on YouTube at https://youtube.com/live/qw3x1HcX6xE?feature=share
 
Hosts: 

• Eric Peterson - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy workshop tickets to CF Summit East
•  Event Date: April 24, 2024
  • Hosted By: Adobe & Carahsoft
  • Location: Reston, VA
• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• MAY 15th - 17th,2024 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (charming)

We have 50 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

ICYMI — CFCamp has announced the first batch of Sessions
This year's programme was once again open for participation from the CFML and wider development communities. If you're interested in what the Call For Papers for CFCamp 2024 looked like - it's still online on papercall.io (but now closed as of end of March 2024).

So far, we have confirmed and announced 20 sessions. There are still a few more to come, stay tuned.

The sessions will be assigned to slots and rooms a bit closer to the event.
https://www.cfcamp.org/sessions.html

New Releases and Updates

ICYMI - qb 9.8.2 – 9.10.0

• New addIndex method for adding indexes to existing tables 
• New BindingsCommenter for SQL Commenter
• Performance improvement for large recordsets (Thanks, John Whish!)

https://qb.ortusbooks.com/whats-new

ICYMI - Quick 8.0.3
Support qb's SqlCommenter.
https://quick.ortusbooks.com/whats-new

ICYMI - Megaphone 1.0.3 – 1.0.4
Bug fixes in the Slack Provider
https://megaphone.ortusbooks.com/whats-new

In Beta - cbq 3.0.0-beta.7

• More reliable Database Provider
• Keep completed or failed database provider jobs around for debugging
• Wait for jobs to complete when reiniting or shutting down ColdBox (up to a timeout)

https://cbq.ortusbooks.com/whats-new

Webinars, Meetups and Workshops

ICYMI — CF Summit Online
Charlie Arehart has provided all the links for this

List of Sessions, Descriptions and Links: https://adobe-coldfusion-online-summit-2024.attendease.com/sessions-on-demand/
Youtube Playlist of the Sessions: https://www.youtube.com/playlist?list=PL3iywAijqFoXrJ7jHdw-A1vNl-JB-iDQ7

CFCasts Content Updates

https://www.cfcasts.com

Recent Releases

• An example of Dark mode implementation with tailwind css
  • https://cfcasts.com/series/dark-mode-implementation-with-tailwind-css/videos/an-example-of-dark-mode-implementation-with-tailwind-css
• vue-helpers - ForgeBox Module of the Week - 04/16/24 - Episode 214
  • https://cfcasts.com/series/2024-2024-forgebox-module-of-the-week/videos/vue-helpers-forgebox-module-of-the-week-041624-episode-214
• Anima: Figma Design to Code | Front-End Coding Assistant - VSCode Hint Tip and Trick of the Week - 04/16/24 - Episode 214
  • https://cfcasts.com/series/2024-vscode-hint-tip-and-trick-of-the-week/videos/anima:-figma-design-to-code-or-front-end-coding-assistant-vscode-hint-tip-and-trick-of-the-week-041624-episode-214

Conferences and Training

ITB 2024

• Location: Optica in Washington, DC
• Dates: May 15-17, 2024
• https://www.eventbrite.com/e/into-the-box-2024-the-new-era-of-modernization-tickets-663126347757
• Most sessions and workshops have been announced: https://www.intothebox.org/ 
• We have 5, yes 5 SECRET SESSIONS - that you have to be there to see them.
• Hotel Options - https://www.ortussolutions.com/blog/hotel-options-into-the-box-2024 
• Announcement Blog Post: https://www.ortussolutions.com/blog/our-into-the-box-2024-venue-and-dates-are-set 

CFCamp 2024

• Location: Munich, Freising, Germany
• Dates: June 13-14, 2024
• Twitter Link: https://twitter.com/cf_camp/status/1736705195927646236
• Facebook Link: https://t.co/YKU4dhuHEO
• https://www.cfcamp.org/ 
• https://www.cfcamp.org/tickets.html 
• Sessions announced: https://www.cfcamp.org/sessions.html 

CF Summit West in Las Vegas

At Resorts Worl...

2024-04-16 Weekly News — Episode 214

Watch the video version on YouTube at https://youtube.com/live/Djeas-Lw3XU?feature=share
 
Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Brad Wood - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy workshop tickets to CF Summit East
•  Event Date: April 24, 2024
  • Hosted By: Adobe & Carahsoft
  • Location: Reston, VA
• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• MAY 15th - 17th,2024 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (Humbling)

We have 50 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

CFCamp has announced the first batch of Sessions

This year's programme was once again open for participation from the CFML and wider development communities. If you're interested in what the Call For Papers for CFCamp 2024 looked like - it's still online on papercall.io (but now closed as of end of March 2024).

So far, we have confirmed and announced 20 sessions. There are still a few more to come, stay tuned.

The sessions will be assigned to slots and rooms a bit closer to the event.
https://www.cfcamp.org/sessions.html

Redis changed license - and spawned ValKey

Redis, a tremendously popular tool for storing data in-memory rather than in a database, recently switched its licensing from an open source BSD license to both a Source Available License and a Server Side Public License (SSPL).

The software project and company supporting it were fairly clear in why they did this. Redis CEO Rowan Trollope wrote on March 20 that while Redis and volunteers sponsored the bulk of the project's code development, "the majority of Redis’ commercial sales are channeled through the largest cloud service providers, who commoditize Redis’ investments and its open source community." Clarifying a bit, "cloud service providers hosting Redis offerings will no longer be permitted to use the source code of Redis free of charge."

https://arstechnica.com/information-technology/2024/04/redis-license-change-and-forking-are-a-mess-that-everybody-can-feel-bad-about/

Vercel Releasing new Pricing July 21st

Vercel pricing is going from golden to arm and a leg of gold.
Look at using your own VPS and save $$$
Example: https://x.com/themsaid/status/1776114395371684166

New Releases and Updates

ICYMI - Quick 7.4 – 8
New hasManyDeep relationship and revamped hasManyThrough.
Better performance, correct constraints, and increased readability.

https://quick.ortusbooks.com/whats-new

ICYMI - qb 9.8
New withAlias function that will automatically rename fully qualified columns with the old name or alias.
https://qb.ortusbooks.com/whats-new

ICYMI - Megaphone 1.0.1
Uses the default cbMailServices email provider and logs success and failure by default.
https://megaphone.ortusbooks.com/whats-new

Webinars, Meetups and Workshops

CF Summit Online
Charlie Arehart has provided all the links for this

List of Sessions, Descriptions and Links: https://adobe-coldfusion-online-summit-2024.attendease.com/sessions-on-demand/
Youtube Playlist of the Sessions: https://www.youtube.com/playlist?list=PL3iywAijqFoXrJ7jHdw-A1vNl-JB-iDQ7

ICYMI - Mid-Michigan CFUG - Charlie Arehart - What if no one is monitoring your DB server?
April 9th
Blog on the topic: https://www.carehart.org/blog/2024/4/9/presenting_on_db_monitoring
Recording: https://www.youtube.com/watch?v=hu1ueRydgyM

CFCasts Content Updates

https://www.cfcasts.com

Recent Releases

• Intro Dark mode implementation tailwind
  • https://www.cfcasts.com/series/dark-mode-implementation-with-tailwind-css/videos/intro-dark-mode-implementation-tailwind-final-(1) 
• Installation tailwind
  • https://www.cfcasts.com/series/dark-mode-implementation-with-tailwind-css/videos/installation-tailwind-final-(2)
• What's New in the Ortus ORM Extension?
  • https://www.cfcasts.com/series/ortus-bytes/videos/what's-new-in-the-ortus-orm-extension 
• CBStorages - ForgeBox Module of the Week - 04/02/24 - Episode 213
  • https://www.cfcasts.com/series/2024-2024-forgebox-module-of-the-week/videos/cbstorages-forgebox-module-of-the-week-040224-episode-213
• Rainglow Themes - VSCode Hint Tip and Trick of the Week - 04/02/24 - Episode 213
  • https://www.cfcasts.com/series/2024-vscode-hint-tip-and-trick-of-the-week/videos/rainglow-themes-vscode-hint-tip-and-trick-of-the-week-040224-episode-213 

Conferences and Training

CF Summit East - NEXT WEEK!!!!
Wednesday, April 24, 2024 - FREE
8:00am - 4:00pm
Carahsoft Conference & Collaboration Center
11493 Sunset Hills Road,
Reston, VA 20190
Registr...

2024-04-02 Weekly News — Episode 213

Watch the video version on YouTube at https://youtube.com/live/Vg81ar7GfW4?feature=share
 
Hosts: 

• Eric Peterson - Senior Developer at Ortus Solutions
• Grant Copley - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy workshop tickets to CF Summit East
•  Event Date: April 24, 2024
  • Hosted By: Adobe & Carahsoft
  • Location: Reston, VA
• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• MAY 15th - 17th,2024 - Washington, DC
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (phenomenal)

We have 46 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

CVE-2024-20767: Critical Adobe ColdFusion Flaw Exposes Sensitive Files, PoC Published

Security researcher ma4ter has revealed details of a dangerous security vulnerability (CVE-2024-20767) in Adobe ColdFusion, also, another researcher published the proof-of-concept (PoC) exploit code. This flaw originally reported to Adobe, could be exploited to read arbitrary files on an affected server, potentially exposing highly confidential information. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized access to sensitive files and perform arbitrary file system write. Exploitation of this issue does not require user interaction.

• Patch released on March 12, 2024.
• Only vulnerable if you had the Performance Monitoring Toolset enabled and accessible via /pms.

https://securityonline.info/cve-2024-20767-critical-adobe-coldfusion-flaw-exposes-sensitive-files-poc-published/
https://helpx.adobe.com/security/products/coldfusion/apsb24-14.html

New Releases and Updates

New Adobe Releases

Key enhancements include:

• Scope Variable Changes: Enhanced functionality for optimized performance.
• CFDocument Updates: Upgrades for smoother document handling.
• Major Library Upgrades: Keeping your application’s backbone strong and secure.
• CKEditor Changes: Enhanced editing features for a better user experience.

Versions:
- 2021.0.13+330286
- 2023.0.07+330663

https://www.fusion-reactor.com/blog/adobe-coldfusion-important-upgrades-and-cf-summit-east-2024/

https://twitter.com/bdw429s/status/1772726892296130810

Quick 7.4 – 8
New hasManyDeep relationship and revamped hasManyThrough.
Better performance, correct constraints, and increased readability.

https://quick.ortusbooks.com/whats-new

qb 9.8
New withAlias function that will automatically rename fully qualified columns with the old name or alias.
https://qb.ortusbooks.com/whats-new

Megaphone 1.0.1
Uses the default cbMailServices email provider and logs success and failure by default.
https://megaphone.ortusbooks.com/whats-new

CFCasts Content Updates

https://www.cfcasts.com

Recent Releases

• Getting Started with Cloud Migrations by Daniel Garcia
  • https://cfcasts.com/series/ortus-bytes/videos/cloud-migrations-getting-started
• Windows Terminal Enhancements using Oh My Posh by Jaime Ramirez
  • https://cfcasts.com/series/ortus-bytes/videos/1-windows-terminal-enhancements-using-oh-my-posh

Conferences and Training

CF Summit East
Wednesday, April 24, 2024
8:00am - 4:00pm
Carahsoft Conference & Collaboration Center
11493 Sunset Hills Road,
Reston, VA 20190
Registration: https://carahevents.carahsoft.com/Event/Details/429564-adobe

ACP Training prior to CF Summit East
https://www.carahsoft.com/learn/event/50992-acp-adobe-coldfusion-at-adobe-cf-summit-east

ColdBox 7 Workshop at Adobe CF Summit East 2024
A Deep Dive into ColdBox 7.2
Date: April 25th - 26th, 2024 | After Adobe CFSummit East
Speakers: Luis Majano, creator of ColdBox
Elevate Your CFML Development Skills!
Master ColdBox 7.2 from the Ground Up in Our Workshop Following CFSummit East 2024
Calling all CFML developers and enthusiasts! We are thrilled to announce an upcoming event that promises to elevate your skills and empower you with ColdBox's latest updates and features. This two-day workshop is led by the creator of ColdBox, Luis Majano. You'll dive into ColdBox 7.2, exploring new features, updates, and fixes to build modern, high-quality projects.
Whether you're a beginner looking to jumpstart your journey into the MVC ecosystem or an experienced developer seeking to refine your ColdBox skills, this workshop is designed to meet your needs. Get ready for an immersive experience that keeps you at the forefront of ColdBox development!
Tickets are limited, get yours now and save with early bird pricing
https://www.ortussolutions.com/blog/a-deep-dive-into-coldbox-72

ITB 2024

• Location: Optica in Washingto...

2024-03-05 Weekly News — Episode 212

Watch the video version on YouTube at https://youtube.com/live/Vg81ar7GfW4?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy workshop tickets to CF Summit East
• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon! In hardcover too!!!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (phenomenal)

We have 46 patreons:
 
https://www.patreon.com/ortussolutions.

News and Announcements

Whitehouse Mandate - Press Release: Future Software Should Be Memory Safe
Leaders in Industry Support White House Call to Address Root Cause of Many of the Worst Cyber Attacks
Today, the White House Office of the National Cyber Director (ONCD) released a report calling on the technical community to proactively reduce the attack surface in cyberspace. ONCD makes the case that technology manufacturers can prevent entire classes of vulnerabilities from entering the digital ecosystem by adopting memory safe programming languages. ONCD is also encouraging the research community to address the problem of software measurability to enable the development of better diagnostics that measure cybersecurity quality.
Full Report:  https://www.whitehouse.gov/wp-content/uploads/2024/02/Final-ONCD-Technical-Report.pdf
Blog Post: https://www.whitehouse.gov/oncd/briefing-room/2024/02/26/press-release-technical-report/

Three Recent Lucee Vulnerabilities
Last week, Harsh Jaiswal and Rahul Maini from ProjectDiscovery released some impressive security research on multiple vulnerabilities in Lucee (and Mura CMS and Masa CMS).  Their blog post is a must-read, and I'm not going to rehash their steps from research to discovery to exploitation.  Instead, I'm going to look at these vulnerabilities through a defensive lens. 
https://www.hoyahaxa.com/2024/02/thinking-defensively-about-three-recent.html

One Reason Why Your ColdFusion Server May Still Be Vulnerable Even With the Latest Security Updates Installed
Next Tuesday is Adobe Patch Tuesday.  Will there be new ColdFusion security updates?  I have no idea.  But even if there are no new patches released, and your ColdFusion servers already have the latest updates installed, you may still be missing an important step in keeping them secure.
https://www.hoyahaxa.com/2024/03/one-reason-why-your-coldfusion-server.html

ICYMI : CF Summit East Announced
Adobe and Carahsoft would like to officially invite you to our interactive Adobe ColdFusion Summit East 2024. This event is an unparalleled experience featuring a gathering of professionals, developers, and thought leaders in the dynamic realm of ColdFusion technology.
https://carahevents.carahsoft.com/Event/Details/447476-xbyte
 
Into The Box 2024, Third Wave of Sessions!
Are you ready for what's in store? In this round of releases, we're excited to announce the addition of two mystery sessions presented by Ortus Solutions. These sessions are set to redefine how you approach CFML development, introducing key tools and surprises that will welcome a new era of modernization. Get ready to be inspired, challenged, and equipped with cutting-edge techniques that will elevate your projects to new heights.

But that's not all! Our agenda is packed with diverse workshops and sessions meticulously curated to cater to developers of all levels. Whether you're a seasoned pro or just starting your CFML journey, there's something for everyone at Into the Box 2024.
https://www.ortussolutions.com/blog/unveiling-the-future-of-cfml-development-3rd-round-of-sessions
https://www.intothebox.org/

New Releases and Updates

CommandBox 6.0.0 Released!
We are pleased to announce the release of CommandBox 6.0.0.  This is a major release of our CLI, REPL, Package Manager, and CFML Server.  It comes with some major new features for you to play with.  And even better, CommandBox 6 should be 99% backwards compatible with CommandBox 5.9 so you can update and test it out today.
https://www.ortussolutions.com/blog/commandbox-600-released

Ortus Redis Extension v3.3.0 Released!
We are very excited to bring you another release for our Redis Lucee Extension. The most significant feature in this release is the addition of the `` and `redisLock{}` tag, which allows you perform a lock across all instances in a cluster.
Ortus Redis Extension v3.3.0 gives you greater control over concurrent modifications in a distributed environment, utilizing your distributed cache to prevent overlaps!
https://www.ortussolutions.com/blog/ortus-redis-extension-v330-released

ICYMI - ColdFusion Builder extension for Visual Studio Code -  A new update is available!
https://community.adobe.com/t5/coldfusion-discussions/coldfusion-builder-extension-for-visual-studio-code-a-new-update-is-available/m-p/14365891

ICYMI - Hyper v7.3.0
https://hyper.ortusbooks.com/whats-n...

2024-02-06 Weekly News — Episode 211

Watch the video version on YouTube at https://youtube.com/live/_Uo1izajUeM?feature=share

Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Eric Peterson - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy workshop tickets to CF Summit East
• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (skillful)

We have 45 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

CF Summit East Announced
Hey east coast Adobe #ColdFusion developers, get ready because #CFSummitEast2024 is coming in hot, on April 23rd-24th!
This #FreeEvent brings together some of the most accomplished #CFML speakers in the world in a government, military and adjacent contractors focused #conference,in an intimate, small setting in Washington D.C..
We are also once again offering an in-person training and certification opportunity to earn your Adobe Certified Professional: Adobe ColdFusion ($99).
https://www.linkedin.com/posts/marktakata_coldfusion-cfsummiteast2024-freeevent-activity-7158533583014436864-u182
 
Mark Takata at Adobe
On LinkedIn earlier this week, Mark Takata said that he is both thrilled and humbled to announce that he had been promoted to Senior ColdFusion Technical Evangelist at Adobe!
Congrats Mark!

Second set of ITB Speakers & Sessions announced - more to come!!!
Get ready for an innovative and exciting experience at the upcoming Into the Box 2024 conference, where we're changing venues and reshaping the essence of content delivery. Anticipate a surge of excitement with thrilling product updates and new releases. Join us from May 15th to 17th, 2024, in the dynamic city of Washington, DC, hosted at the cutting-edge Optica venue. Witness a conference that marks the dawn of a new modernization era, curated by the forward-thinking Ortus Solutions Team.

https://www.ortussolutions.com/blog/into-the-box-2024-second-round-of-sessions-released

https://www.intothebox.org/

New Releases and Updates

ColdFusion Builder extension for Visual Studio Code -  A new update is available!
We are pleased to announce the availability of the updated ColdFusion Builder extension for Visual Studio Code.
Highlights of the release
ColdFusion Builder extension for Visual Studio code (update 2) (release date: January 16, 2024) contains dictionary support for the functions added in ColdFusion (2023 release), such as JWT, serialization, and XML. The update also contains a few bug fixes.
https://community.adobe.com/t5/coldfusion-discussions/coldfusion-builder-extension-for-visual-studio-code-a-new-update-is-available/m-p/14365891

Hyper v7.3.0
Retrying Failed Requests
You can now configure a HyperRequest to automatically retry failed requests.  See the HyperRequest docs for details.

Default User-Agent
Hyper now sends a default User-Agent of HyperCFML/#versionNumber#.

Reset Fake Request Counts and Sequences
Hyper can now reset the fake request counts and sequences without losing the fake configuration using the resetFakes method.

https://hyper.ortusbooks.com/whats-new#id-7.3.0

Webinars, Meetups and Workshops

ICYMI - Online CFMeetup - “The Many Capabilities of CF Package Management and cfpm" with Charlie Arehart  #305
Thursday, January 25, 2024
9:00 AM PST
You may or may not have heard that CF2021 added a new tool called cfpm, the ColdFusion Package Manager. It was introduced in CF2021, and while some are aware that it can help manage the new modular packages-based design of ColdFusion, many are unaware of the many features of this cfpm tool--and how this package management mechanism can be used to their advantage.
In this talk, veteran CF troubleshooter Charlie Arehart will introduce the feature (CF's package-based design and the package manager), including identifying the way it can manage the packages used in a current CF instance as well as in automating creation of new instances. Perhaps most useful, we'll see how the tool offers a mechanism to SCAN your CFML code base to identify what packages you would need. We'll also see how the tool can help with updating CF, as well as managing the update download "repo". And speaking of updates, we'll discuss ways the cfpm/package mechanism has evolved in updates since the release of CF2021 and in CF2023.
Meetup:https://www.meetup.com/coldfusionmeetup/events/298727912/
Recording: https://www.youtube.com/watch?v=EYTW7adg_Ao&list=PLG2EHzEbhy0-QirMKgSxhjkUyTSSTvHjL&index=1&pp=iAQB

CF Hawaii - ColdBox Modules - Jon Clausen
Feb 23rd - 12pm Hawaii Time
https://cfml.slack.com/archives/C06TSRXCJ/p1706309775867449?thread_ts=1706236924.005739&cid=C06TSRXCJ

Recent Releases
Into the Box 2023 Videos are now available for all Paid Subscriptions https://cfcasts.com/series/itb-2023
 
Coming Soon - After the break from Holidays
Mastering CBWIRE v3 from Grant

Conferences and Training

Adobe ColdFusion Online Summit 2024
Unleash the powe...

2024-01-23 Weekly News — Episode 210

Watch the video version on YouTube at https://www.youtube.com/watch?v=K2-hjkIsSvg
 
Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Eric Peterson - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy workshop tickets to CF Summit East
• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (staunch)

We have 38 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

ColdBox 7 Workshop at Adobe CF Summit East 2024
A Deep Dive into ColdBox 7.2 -
Date: April 25th - 26th, 2024 | After Adobe CFSummit East
Speakers: Luis Majano, creator of ColdBox
Elevate Your CFML Development Skills!
Master ColdBox 7.2 from the Ground Up in Our Workshop Following CFSummit East 2024
Calling all CFML developers and enthusiasts! We are thrilled to announce an upcoming event that promises to elevate your skills and empower you with ColdBox's latest updates and features. This two-day workshop is led by the creator of ColdBox, Luis Majano. You'll dive into ColdBox 7.2, exploring new features, updates, and fixes to build modern, high-quality projects.
Whether you're a beginner looking to jumpstart your journey into the MVC ecosystem or an experienced developer seeking to refine your ColdBox skills, this workshop is designed to meet your needs. Get ready for an immersive experience that keeps you at the forefront of ColdBox development!
Tickets are limited, get yours now and save with early bird pricing
https://www.ortussolutions.com/blog/a-deep-dive-into-coldbox-72

ITB Workshops and Speakers announced - more to come!!!
https://www.intothebox.org/

CFCamp Call for Speakers is Open - CFP closes at March 17, 2024 23:30 UTC
Last year’s CFCamp 2023 was our first event after a forced-upon-us pandemic break and we were really happy how the conference was re-adopted by the community and that we were able to run in a reasonable and yet safe environment. So….
CFCamp is back for a 2024 edition.
Would you like to meet the German and European CFML web developer communities, listen to expert speakers and find out all about the latest trends around CFML and associated technologies? Then join us at CFCamp 2024, Europe’s largest conference on CFML, Lucee, Adobe ColdFusion and associated technologies.

Look at recommended topics - big variety

https://www.papercall.io/cfcamp2024

Ben Nadel Released his Book - Feature Flags Book - Transforming Your Product Development Workflow
In my tenure as co-founder and principal engineer at InVision, I went from never having heard of "Feature Flags" (aka "feature toggles" aka "feature switches"); to seeing them become widely adopted by our engineering team; to witnessing a complete transformation with regard to how our company approached product development. For me, feature flags are as transformational as databases—they are as important as both logs and metrics. I cannot imagine creating another product without them.

I believe that I have a perspective worth sharing. I want to help people see the magic that I see. I want to help teams deliver value to their customers with love and empathy and without fear.

https://featureflagsbook.com/

New Releases and Updates

ColdBox Debugger v4.2 - Unleashing a Wave of Debugging Power!
In the ever-evolving landscape of web development, staying ahead requires cutting-edge tools. Enter ColdBox Debugger v4.2.0, the latest release that promises an action-packed experience with a plethora of features, improvements, and bug fixes. This update introduces the Hyper Collector, allowing you to track Hyper HTTP/S requests effortlessly with aggregated data on total time, slowest requests, grouping, and timelines. Lucee SQL Collector now enables profiling of SQL queries, providing valuable insights into your Lucee-powered applications. The addition of Heap Dump Support empowers users to generate Java heap dumps for offline analysis, ideal for debugging memory leaks and ensuring system stability. A revamped Request Dock and enhanced SQL/JSON formatting contribute to an improved user interface. Moreover, the ability to add timers manually and download heap dump snapshots adds versatility to your debugging toolkit.

ColdBox Debugger v4.2.0 is not just an upgrade; it's a leap forward in simplifying the debugging process and enhancing overall development efficiency. Explore the new features and take your debugging game to new heights!
https://www.ortussolutions.com/blog/coldbox-debugger-v42-unleashing-a-wave-of-debugging-power

CBWIRE 3.2 Released

Hey there CBWIRE enthusiasts! 👋 It's an exciting time in the world of ColdFusion Markup Language (CFML) development as CBWIRE 3.2 rolls out with some nifty new features that are set to make your development process smoother and more efficient. Let's dive right into the highlights of this latest release!
https://www.ortussolutions.com/blog/cbwire-32-released

Webinars, Meetups and Workshops

Online CFMeetup - The Many Capabilities of CF Package Management and cfpm" with Charlie Arehart  #305
Thursday, January 25, 2024
9:00 AM PST
You may or may not have heard that CF2021 added a new tool called cfpm, the ColdFusion Package Manager. It was introduced in CF2021, and while some are aware that it can help manage the new modular packages-based design of ColdFusion, many are unaware of the many features of this cfpm tool--and how this package management mechanism can be used to their advantage.

In this talk, veteran CF troubleshooter Charlie Arehart will introduce ...

2023-12-19 Weekly News — Episode 209

Watch the video version on YouTube at https://youtube.com/live/BbBInJ9LgDo?feature=share

Hosts: 

• Eric Peterson - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon!
  • https://www.amazon.com/dp/B0CJHB712M
  • Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support (Festive)

We have 42 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

No new news

New Releases and Updates

ContentBox 6 Released
Lots of great updates including improvements to the ContentBox CLI, upgraded to use ColdBox 7, now using cbSecurity 3 with more security features, content templates, domain aliases, migrations, and more!
https://www.ortussolutions.com/blog/contentbox-v60-released

Webinar / Meetups and Workshops

ICYMI - Hawaii ColdFusion Meetup Group - InertiaJS and ColdFusion with Eric Peterson
InertiaJS is a new JavaScript framework made for people who don’t really need an API but want to use a modern JavaScript framework like React or Vue as their view layer. Inspired by libraries like Turbolinks, InteriaJS makes your app behave like a SPA while still being a fully server-rendered app.
https://www.meetup.com/hawaii-coldfusion-meetup-group/events/297584413/
Recording: https://hawaiicoldfusionusergroup.adobeconnect.com/pkc1egu6z131/

Online CFMeetup - Installing CF2023: choices, challenges, and solutions with Charlie Arehart
December 21st, 2023 at 12pm US Eastern Time
If you'll be installing CF2023, there are some things to consider before or as you do. First, be aware that besides the traditional full installer there's the new "zip" install option (added in CF2021). What's that about, why might you want to use it--or not?

Then there are some options and choices during installation--some new also with CF2021. Perhaps it's been a while since you've installed even previous CF versions. We'll cover some of the key options to consider (including license activation, package/module management, and more) as well as post-install steps including updating CF and the JVM, and migrating in CF Admin settings (including using the new CLI/json admin config tool, cfsetup).
https://www.meetup.com/coldfusionmeetup/events/298025246/

CFCasts Content Updates

https://www.cfcasts.com

Recent Releases

• Into the Box 2023 Videos are now available for all Paid Subscriptions https://cfcasts.com/series/itb-2023 

Coming Soon

• Mastering CBWIRE v3 from Grant

Conferences and Training

ITB 2024

• Location: Optica in Washington, DC
• Announcement Blog Post: https://www.ortussolutions.com/blog/our-into-the-box-2024-venue-and-dates-are-set
• Dates: May 15-17, 2024
• Get Blind Tickets Now (through the end of the year): https://www.eventbrite.com/e/into-the-box-2024-the-new-era-of-modernization-tickets-663126347757
• Call for Speakers: CLOSED 
• First batch of sessions and workshops being announced this week.

Save the Date: CFCamp 2024

• Location: Munich, Freising, Germany
• Dates: June 13-14, 2024
• Call for Speakers: around mid-January (https://twitter.com/cf_camp/status/1736851753260498946)
• Twitter Link: https://twitter.com/cf_camp/status/1736705195927646236
• Facebook Link: https://t.co/YKU4dhuHEO

More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/

Blogs, Tweets, and Videos of the Week

12/06/23 - Blog - Ben Nadel - Generating Pandoc Heading Identifiers In ColdFusion
Over on my Feature Flags book website, I'm using my book's Markdown content to generate the HTML for the page. I then use jSoup to inject a table of contents (TOC); which requires that I insert an identifier into each header element. And, now that I'm trying to use Pandoc to generate an EPUB (digital book) version, I need to make sure that my ColdFusion-based header identifiers match the ones that Pandoc will generate in the final EPUB.
https://www.bennadel.com/blog/4537-generating-pandoc-heading-identifiers-in-coldfusion.htm

12/11/23 - Blog - Robert Zehnder - Bringing back commandbox-ssg
Over the past few years, my focus has been largely on blog-related projects. My initial foray into the world of static site generators began with commandbox-jasper. This project laid the foundation for my current static site generator, aptly named commandbox-ssg. commandbox-ssg not only inherits a substantial portion of its codebase from Jasper, but it also boasts several refinements and a more descriptive name that better captures its functionality. The name Jasper, while a sentimental nod to my dog, didn't quite convey the tool's purpose.

The transition of my development environment from MacOS to Windows, however, presented some unexpected challenges. It became apparent that my assumptions regarding file paths, which worked seamlessly on MacOS, were not compatible w...

2023-12-05 Weekly News — Episode 208

Watch the video version on YouTube at https://youtube.com/live/WHVwcHtf_gA?feature=share
 
Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Grant Copley - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways  to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• Like and subscribe to our videos on YouTube. 
  • Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
• 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
• Now on Amazon!
• https://www.amazon.com/dp/B0CJHB712M
• Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

Patreon Support ()

We have 42 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

Adobe ColdFusion flaw exploited in US government agency attacks
Adobe released a security update for the vulnerability (CVE-2023-26360) that the attackers exploited in March this year. At that time, the vulnerability was already used in zero-day attacks.
Following the FCEB agency’s investigation, analysis of network logs confirmed the compromise of at least two public-facing servers within the environment between June and July 2023.
https://stackdiary.com/adobe-coldfusion-flaw-exploited-in-us-government-agency-attacks/
https://www.cisa.gov/news-events/alerts/2023/12/05/cisa-releases-advisory-threat-actors-exploiting-cve-2023-26360-vulnerability-adobe-coldfusion

CISA has issued an alert regarding multiple vulnerabilities impacting Adobe ColdFusion.
CISA has issued an alert regarding multiple vulnerabilities impacting Adobe ColdFusion. The alert underscores that the exploitation of the vulnerabilities could grant threat actors control over affected systems, prompting organizations to take measures to protect their systems.

Adobe ColdFusion serves as a rapid scripting environment for developing dynamic internet applications on both web and mobile platforms, utilizing ColdFusion Markup Language (CFML).

The security update addresses a range of vulnerabilities, including critical, high, and medium severity issues. These vulnerabilities have the potential to enable threat actors to access specific endpoints or execute arbitrary code, without requiring user interaction.
https://socradar.io/cisa-alert-serious-vulnerabilities-in-adobe-coldfusion-cve-2023-44350-cve-2023-44351-cve-2023-44353-and-more/

Ben Nadel wrote a Book - Early Access: Feature Flags - From Concept To Cultural Revolution
Almost 3-months ago, I announced that I was writing a book on Feature Flags. This morning, I'm thrilled to announce that I have an early access version available for purchase. This is a PDF version; and, the formatting is a bit rough around the edges. But, the content is all there. And, if you pick-up the book now (at a deep discount), you'll automatically get access to future versions.
https://www.bennadel.com/blog/4531-early-access-feature-flags-from-concept-to-cultural-revolution.htm

New Releases and Updates

Update your servers with the below updates
ICYMI - Adobe November Updates - Security Fixes
Adobe for ColdFusion 2023 (update 6) and 2021 (update 12)
Previous versions no longer receive security updates!!!

CommandBox has already been updated

Security updates available for Adobe ColdFusion | APSB23-52 - https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html

https://community.adobe.com/t5/coldfusion-discussions/now-live-adobe-coldfusion-2023-and-2021-november-security-updates/m-p/14233917#M196421

Note: Reported WDDX related issues by some customers

More details from Charlie Arehart: https://www.carehart.org/blog/2023/11/14/cf_security_updates_nov_2023#more

ICYMI - ColdBox 7.2.0 Released

Welcome to ColdBox 7.2.0, which packs a big punch on stability and tons of new features.
Includes lots of updates for all the core products: ColdBox, WireBox, CacheBox, and LogBox.
ColdBox, 10 new features, 6 improvements and 4 bug fixes
LogBox has 3 new features, 4 improvements, 2 bug fixes and a task
With WireBox including a new feature and CacheBox has an Improvement.
https://coldbox.ortusbooks.com/readme/release-history/whats-new-with-7.2.0

Webinar / Meetups and Workshops

ColdFusion Security Training
Writing Secure CFML with Pete Freitag
A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.

Where: Online
When: Tuesday December 12, 2023 @ 11am-2pm EST & Wednesday December 13 @ 11am-2pm
Price: $899 per student
https://foundeo.com/consulting/coldfusion/security-training/

The class will be recorded, so if you cannot attend it fully online you will have access to a recording.

Hawaii ColdFusion Meetup Group - InertiaJS and ColdFusion with Eric Peterson
December 15th
InertiaJS is a new JavaScript framework made for people who don’t really need an API but want to use a modern JavaScript framework like React or Vue as their view layer. Inspired by libraries like Turbolinks, InteriaJS makes your app behave like a SPA while still being a fully sever-rendered app.
https://www.meetup.c...

2023-11-21 Weekly News — Episode 207

Watch the video version on YouTube at https://youtube.com/live/1aeDZ7q5Y2E?feature=share
 
Hosts:

• Eric Peterson - Senior Developer at Ortus Solutions
• Daniel Garcia - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways  to say thanks back to Ortus Solutions:

• Buy Tickets to Into the Box 2024 in Washington DC https://www.intothebox.org/
• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
• 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
• Now on Amazon!
• https://www.amazon.com/dp/B0CJHB712M
• Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

 
Patreon Support (flabbergasting)

We have 42 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

NCC Group - Technical Advisory: Adobe ColdFusion WDDX Deserialization Gadgets
Adobe ColdFusion allows software developers to rapidly build web applications. Recently, a critical vulnerability was identified in the handling of Web Distributed Data eXchange (WDDX) requests to ColdFusion Markup (CFM) endpoints. Multiple patches were released by Adobe to resolve the vulnerability, and each has been given its own CVE and Adobe security update.
https://research.nccgroup.com/2023/11/21/technical-advisory-adobe-coldfusion-wddx-deserialization-gadgets/

Ortus End of the Year Sale is Finally Here!
The much-anticipated Ortus End-of-the-Year Sale has arrived, and it's time to elevate your development experience! Whether you're a seasoned developer, a tech enthusiast, or someone on the lookout for top-notch projects, Ortus has something special in store for you. Brace yourself for incredible discounts across a wide array of products and services, including Ortus annual events, books, cutting-edge services, and more.
https://www.ortussolutions.com/blog/ortus-deals-are-finally-here
 
New Releases and Updates

Adobe November Updates - Security Fixes
Adobe for ColdFusion 2023 (update 6) and 2021 (update 12)
Previous versions no longer receive security updates!!!

CommandBox has already been updated

Security updates available for Adobe ColdFusion | APSB23-52 - https://helpx.adobe.com/security/products/coldfusion/apsb23-52.html

https://community.adobe.com/t5/coldfusion-discussions/now-live-adobe-coldfusion-2023-and-2021-november-security-updates/m-p/14233917#M196421

Note: Reported WDDX related issues by some customers

More details from Charlie Arehart: https://www.carehart.org/blog/2023/11/14/cf_security_updates_nov_2023#more

ICYMI - 10/23/2023- Added Java installers for Java 17.0.9, Java 11.0.21 & JDK/JRE 8u391

10/10/2023- Refreshed the Server ZIP and GUI installers, Lockdown installer, and Add-on installer for ColdFusion (2023 release).

https://helpx.adobe.com/coldfusion/kb/coldfusion-downloads.html#download0

Avoid issues with Update thanks for Brian for this post: https://www.hoyahaxa.com/2023/10/coldfusion-connectors-and-cfadmin.html

The new connectors in ColdFusion 2023 Update 5 and ColdFusion 2021 Update 11 perform the following actions:

• normalize the request URI
• block any requests with .. in the URI path (which could be attempts to exploit directory traversal vulnerabilities)
• block any requests in which the normalized URI path starts with a case-insensitive /CFIDE 

ColdBox 7.2.0 Released

Welcome to ColdBox 7.2.0, which packs a big punch on stability and tons of new features.
Includes lots of updates for all the core products: ColdBox, WireBox, CacheBox, and LogBox.
ColdBox, 10 new features, 6 improvements and 4 bug fixes
LogBox has 3 new features, 4 improvements, 2 bug fixes and a task
With WireBox including a new feature and CacheBox has an Improvement.
https://coldbox.ortusbooks.com/readme/release-history/whats-new-with-7.2.0

Webinar / Meetups and Workshops

ICYMI - MMCFUG - How to containerize CFML apps for the cloud with Nick Kwiatkowski from Michigan State
November 13th, 2023
Nick Kwiatkowski from MSU Telecom is going to show us how to containerize CFML apps for the cloud at the next meeting of the Mid-Michigan tonight at 7 pm eastern time. Docker, Tanzu, Kubernetes and more.
https://youtu.be/fYQ-BBKir7Q

Hawaii ColdFusion Meetup Group - InertiaJS and ColdFusion with Eric Peterson
November 24th
InertiaJS is a new JavaScript framework made for people who don’t really need an API but want to use a modern JavaScript framework like React or Vue as their view layer. Inspired by libraries like Turbolinks, InteriaJS makes your app behave like a SPA while still being a fully sever-rendered app.
https://www.meetup.com/hawaii-coldfusion-meetup-group/events/294771761/

ColdFusion Security Training
Writing Secure CFML with Pete Freitag
A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.

Where: Online
When: Tuesday December 12, 2023 @ 11am-2pmEST & Wednesday December 13 @ 11am-2pm
Price: $899 per student
https://foundeo.com/consulting/coldfusion/security-training/

The class will be recorded, so if you cannot attend it fully online you will have access to a recording....

2023-11-07 Weekly News — Episode 206

Watch the video version on YouTube at https://youtube.com/live/dhMqARj9jrA?feature=share
 
Hosts: 

• Gavin Pickin - Senior Developer at Ortus Solutions
• Grant Copley - Senior Developer at Ortus Solutions

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways  to say thanks back to Ortus Solutions:

• Like and subscribe to our videos on YouTube. 
• Help ORTUS reach for the Stars - Star and Fork our Repos
  • Star all of your Github Box Dependencies from CommandBox with https://www.forgebox.io/view/commandbox-github 
• Subscribe to our Podcast on your Podcast Apps and leave us a review AND WE WILL READ IT ON THE SHOW
• Sign up for a free or paid account on CFCasts, which is releasing new content regularly
• BOXLife store: https://www.ortussolutions.com/about-us/shop
• Buy Ortus’s Books
  • 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (http://gum.co/coldbox-tips)
  • Now on Amazon!
    • https://www.amazon.com/dp/B0CJHB712M
• Learn Modern ColdFusion (CFML) in 100+ Minutes - Free online https://modern-cfml.ortusbooks.com/ or buy an EBook or Paper copy https://www.ortussolutions.com/learn/books/coldfusion-in-100-minutes 

 
Patreon Support (radical)

We have 41 patreons:
https://www.patreon.com/ortussolutions.

News and Announcements

Adobe ColdFusion India Summit 2023
December 2nd, 2023
Register for Free
Adobe Summit Returns to India for a Trailblazing Tech Encounter
Meet coders from across the globe, learn from industry professionals, and get inspired to develop unique apps right in India!   
After four long years, Adobe ColdFusion Summit is finally making its triumphant return to the country. Join us in Bengaluru on December 2 for exciting sessions that explore Adobe ColdFusion like never before and also sneak a peek into what the future holds for ColdFusion!
https://cf-indiasummit-2023.attendease.com/

New Releases and Updates

Adobe Updates

10/23/2023- Added Java installers for Java 17.0.9, Java 11.0.21 & JDK/JRE 8u391

10/10/2023- Refreshed the Server ZIP and GUI installers, Lockdown installer, and Add-on installer for ColdFusion (2023 release).

https://helpx.adobe.com/coldfusion/kb/coldfusion-downloads.html#download0

Avoid issues with Update thanks for Brian for this post: https://www.hoyahaxa.com/2023/10/coldfusion-connectors-and-cfadmin.html

The new connectors in ColdFusion 2023 Update 5 and ColdFusion 2021 Update 11 perform the following actions:

• normalize the request URI
• block any requests with .. in the URI path (which could be attempts to exploit directory traversal vulnerabilities)
• block any requests in which the normalized URI path starts with a case-insensitive /CFIDE 

SAVE FOR FORGEBOX SECTION
FORGEBOX v7.7 Released
In the ever-evolving world of software development, staying at the forefront is essential. That's why we're thrilled to announce the release of ForgeBox 7.7, a significant update that promises to make your experience even better. This release brings a host of new features and enhancements that will empower developers like never before. Let's dive into what ForgeBox 7.7 has to offer.
https://www.ortussolutions.com/blog/forgebox-v77-released

Webinar / Meetups and Workshops

Hawaii ColdFusion Meetup Group - InertiaJS and ColdFusion with Eric Peterson
November 24th
InertiaJS is a new JavaScript framework made for people who don’t really need an API but want to use a modern JavaScript framework like React or Vue as their view layer. Inspired by libraries like Turbolinks, InteriaJS makes your app behave like a SPA while still being a fully sever-rendered app.
https://www.meetup.com/hawaii-coldfusion-meetup-group/events/294771761/

ColdFusion Security Training
Writing Secure CFML with Pete Freitag
A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.

Where: Online
When: Tuesday December 12, 2023 @ 11am-2pmEST & Wednesday December 13 @ 11am-2pm
Price: $899 per student
https://foundeo.com/consulting/coldfusion/security-training/

The class will be recorded, so if you cannot attend it fully online you will have access to a recording.

CFCasts Content Updates

https://www.cfcasts.com

Recent Releases

• Mastering CBWire — How CBWIRE Works
• Passing Parameters - https://cfcasts.com/series/mastering-cbwire-3/videos/4-mastering-cbwire-v3-passing-parameters-vf
• Contact Form - Part 1 - https://cfcasts.com/series/mastering-cbwire-3/videos/5-mastering-cbwire-v3-contact-form-part-1-vf 
• Into the Box 2023 Videos is available for purchase as an EXCLUSIVE PREMIUM package. https://cfcasts.com/series/itb-2023 
• Subscribers will get access to premium packages after a 6 month exclusive window.
• Into the Box Attendees should have their coupon code in the email already!!!!

Coming Soon

• ITB 2023 videos - will be open to all CFCasts Subscribers November 18th for Thanks Giving Week
• ColdBox Elixir from Eric
• Mastering CBWIRE v3 from Grant

Conferences and Training

Into the Box LATAM
November 30th
University of Business in El Salvador.
https://latam.intothebox.org/

Speakers and Schedules available

Adobe ColdFusion India Summit 2023
December 2nd, 2023
Register for Free
Location: Bengaluru, India
https://cf-indiasummit-2023.attendease.com/

ITB 2024

• Location: Optica in Washington, DC
• Announcement Blog Post: https://www.ortussolutions.com/blog/our-into-the-box-2024-venue-and-dates-are-set
• Dates: May 15-17, 2024
• Get Blind Tickets Now: https://www.e...