Securing ColdFusion (tips)

I’ve started to write a document for OWASP about ColdFusion security which I hope will be included on the site when I finish it.

Any feedback is more than welcome, if you’d like to see anything included about ColdFusion Security, let me know and I’ll do my best to include it.

Some of the items covered are:

1. SQL Injection
2. Database Logins
3. Logging
4. XSS (Cross Site Scripting)
5. Cookie Hijacking
6. Proper Error Handling
7. Input Validation
8. Securing Protected Areas
9. Forms being submitted outside of your domain
10. Automated data mining

The document about ColdFusion security can be downloaded here. Please note that the document is still a work in progress.

This document is sponsored by www.clickfind.com.au

ColdFusion Security