Adobe 38043740 - ColdFusion Standard - Mac Manual page 23

Server lockdown guide
Hide thumbs Also See for 38043740 - ColdFusion Standard - Mac:
Table of Contents

Advertisement

URI
/cffileservlet
/rest
/WSRPProducer
.svn
2.2.9 Create a Website For ColdFusion Administrator
First create a self signed certificate (or preferably utilize a certificate from a trusted certificate authority) by
clicking on the Server Certificates icon under the IIS root. Click on the link to Create Self-Signed Certificate
on the right.
Create an empty directory for the web site root of the ColdFusion administrator web site (eg f:\web\cfadmin\)
Purpose
Serves dynamically generated
assets. It supports the cfreport,
cfpresentation, and cfimage
(with action=captcha and
action=writeToBrowser) tags
Used for CF10 Rest web
services support.
Web Services Endpoint for
WSRP.
If you use subversion to deploy
your ColdFusion applications
you can block the .svn folders,
which may allow source code
disclosure.
Safe to Block
Only if cfreport, cfpresentations
and cfimage are not used.
Only if CF10 REST web services
are not used.
Usually, unless WSRP is used.
Yes
23

Advertisement

Table of Contents
loading

This manual is also suitable for:

Coldfusion 10

Table of Contents