MACROMEDIA COLDFUSION 4.5-ADMINISTRING COLDFUSION..., Manual

Page: 310 / 350

288 Administering ColdFusion Server
Configuring Basic Runtime Security
Basic security lets you disable execution of seven CFML tags that could present
security hazards. You can, however, specify a special directory, called the Unsecured
Tags Directory; this is the only directory from which ColdFusion will execute tags you
disable with Basic security. Tags you disable with Basic security remain disabled if you
switch to Advanced security.
To restrict tag execution
1. Open the ColdFusion Administrator and click the Basic Security link.
You see the Basic Server Security Page.
2. Under Tag Restrictions, remove the check mark from the check box that appears in
front of each tag you want to disable. You can block execution of the following
tags:
•
CFDIRECTORY
•
CFFILE
•
CFCONTENT
•
CFOBJECT
•
CFREGISTRY
•
CFSECURITYADMIN
•
CFEXECUTE
3. To specify a directory from which otherwise blocked tags can be executed, enter a
fully qualified path (using forward slashes) in the Unsecured Tags Directory field.
By default, this is the directory in which the ColdFusion Administrator is installed.
ColdFusion displays an error message when it encounters a restricted tag in an
application. For more information about these tags, see to the CFML Language
Reference.