URI
/cffileservlet
/rest
/WSRPProducer
.svn
2.2.9 Create a Website For ColdFusion Administrator
First create a self signed certificate (or preferably utilize a certificate from a trusted certificate authority) by
clicking on the Server Certificates icon under the IIS root. Click on the link to Create Self-Signed Certificate
on the right.
Create an empty directory for the web site root of the ColdFusion administrator web site (eg f:\web\cfadmin\)
Purpose
Serves dynamically generated
assets. It supports the cfreport,
cfpresentation, and cfimage
(with action=captcha and
action=writeToBrowser) tags
Used for CF10 Rest web
services support.
Web Services Endpoint for
WSRP.
If you use subversion to deploy
your ColdFusion applications
you can block the .svn folders,
which may allow source code
disclosure.
Safe to Block
Only if cfreport, cfpresentations
and cfimage are not used.
Only if CF10 REST web services
are not used.
Usually, unless WSRP is used.
Yes
23