MACROMEDIA COLDFUSION 5 - INSTALING AND CONFIGURING SERVER Informações Técnicas descarregar pdf (Página 53)

Adobe documentation - Confidential

Setting

Default

Recommendation

Description

Default ScriptSrc

Directory

/CFIDE/scripts/

/somewhere-else/

See section 2.16 (Windows) or 3.4

(Linux).

Because the scripts directory also

contains CFML source code (such as

FCKeditor), you should move this

directory to a non-default location.

Allowed file

extensions for

CFInclude tag

Empty

This setting restricts the file

extensions which get compiled

(executed) by a cfinclude tag. By

default cfm files are allowed but all

other file extensions unless

specified here are statically

included, any CFML source code

would not be executed. Take care to

ensure that you have specified any

file extensions of files that contain

CFML code and are included with

cfinclude.

Missing Template

Handler

Blank or

/CFIDE/administr

ator/templates/m

issing_template_e

rror.cfm

Specified

The missing template handler HTML

should be equivalent to the 404

error handler specified on your web

server.

When blank, the missing template

handler is not specified a potential

attacker may get a rough idea of the

ColdFusion version in use.

Site-wide Error

Handler

Blank or

/CFIDE/administr

ator/templates/se

cure_profile_erro

r.cfm

Specified

When blank, the site-wide error

handler may expose information

about the cause of exceptions.

Specify a custom site-wide error

handler that discloses the same

generic message to the user for all

exceptions. Be sure to log and

monitor the actual exceptions

thrown.

Adobe documentation - Confidential

1 2 ... 48 49 50 51 52 53 54 55 56 57 58 ... 76 77

Comentários a estes Manuais

Sem comentários

MACROMEDIA COLDFUSION 5 - INSTALING AND CONFIGURING SERVER Informações Técnicas Página 53

Comentários a estes Manuais

Manuais e produtos relacionados com Servidores MACROMEDIA COLDFUSION 5 - INSTALING AND CONFIGURING SERVER