Configuring Basic Runtime Security - MACROMEDIA COLDFUSION 4.5-ADMINISTRING COLDFUSION SERVER Manual

288

Configuring Basic Runtime Security

Basic security lets you disable execution of seven CFML tags that could present
security hazards. You can, however, specify a special directory, called the Unsecured
Tags Directory; this is the only directory from which ColdFusion will execute tags you
disable with Basic security. Tags you disable with Basic security remain disabled if you
switch to Advanced security.
To restrict tag execution
1. Open the ColdFusion Administrator and click the Basic Security link.
You see the Basic Server Security Page.
2. Under Tag Restrictions, remove the check mark from the check box that appears in
front of each tag you want to disable. You can block execution of the following
tags:
CFDIRECTORY
CFFILE
CFCONTENT
CFOBJECT
CFREGISTRY
CFSECURITYADMIN
CFEXECUTE
3. To specify a directory from which otherwise blocked tags can be executed, enter a
fully qualified path (using forward slashes) in the Unsecured Tags Directory field.
By default, this is the directory in which the ColdFusion Administrator is installed.
ColdFusion displays an error message when it encounters a restricted tag in an
application. For more information about these tags, see to the CFML Language
Reference.
Administering ColdFusion Server