Blog

Cross-site scripting (XSS) is a type of computer security vulnerability typically found in web applications. XSS enables attackers to inject client-side scripts into web pages viewed by other users. A cross-site scripting vulnerability may be used by attackers to bypass access controls such as the same-origin policy. - Ref : Wikipedia

How do you protect your code from Cross Site Scripting (XSS), when your business requirements state that the user must be able to input HTML? This can be a difficult problem to solve and XSS is very difficult to filter against because there are hundreds of attack vectors. One way is to use any one of the industry standard Java Library ( AntiSamy, JSOUP ..etc ) instead of wrote our own custom XSS filtering CFML code. We (at MitrahSoft) prefer to use AntiSamy because of it's flexibility, wide spread usage & support. AntiSamy uses a XML policy file that defines what HTML tags and attributes can be allowed in your application.

Lucee administrator API provides lot of opportunity to manipulate the Lucee administrator configurations without using lucee administrator user interface, this can able to acheived by cfadmin tag. This tag is only available in Lucee CFML engine, this is not available in Adobe ColdFusion. We can use this tag for web or server admin contexts using type attribute

PresideCMS provides the feature to customize the forms, that are created using its form-builder by overriding the formbuilder related handlers & views. Also we can create multiple layouts for forms, that can be associated with the corresponding form by selecting the layout through widgets.

If your blog / web site is missing out a customized forms (contact us, restaurant booking forms, car rental forms, newsletters subscribing forms..etc ), then you are missing out lot of opportunities every day. Just adding contact mail ID in your website will not solve this problem & but it will add more problem like getting spam mails from email harvesters. Form builder is an essential feature of a Content management system or blogging engine. But few of very famous open source projects such as wordpress don't have a form builder feature built-in. But PresideCMS provides an awesome drag and drop feature rich form builder module, that enables content administrators to build input forms to gather submissions from their site users.

Hope you know about PresideCMS (Great CFML open source by Pixl8) already. If not, Please check with PresideCMS Official site and PresideCMS Official documentation.Unlike other open source projects, PresideCMS have very good documentation & instant response on their official slack channel.

Sass compilation using Lucee event gateway & jSass library

Sass compilation using Lucee event gateway & jSass library

Install PresideCMS in Apache without CommandBox

Refer ColdFusion projects earn referral bonus

MitrahSoft contribution to PresideCMS