System information

CONFIGURING AND ADMINISTERING COLDFUSION 9

Administering Security

Last updated 2/21/2012

Note: The Files/Dirs tab works together with the file-based permissions of the operating system. To restrict a user from

browsing another user’s directory, use file-based permissions.

13 Click the Server/Ports tab.

14 To turn off default behavior (global access to all servers and ports), enter the IP addresses and port numbers that

pages in this sandbox can connect to by using tags that access external resources (for example,

cfmail, cfpop,

cfldap, cfhttp, and so on). You can specify an IP address, a server name (such as www.someservername.com), or

a domain name (such as someservername.com). You can optionally specify a port restriction.

Note: This behavior differs from other tabs, such as CFTags, where you select items to disable. If you set any values in

this tab, external-resource tags executed in this sandbox can access only the specified servers and ports.

For example, to allow this sandbox access to 207.88.220.3 on ports 80 and lower, perform the following steps:

a In the IP Address field, enter 207.88.220.3.

b In the Port field, enter 80, and click This Port and Lower.

Note: To deny access by these ColdFusion tags to an entire site, enable access for a local resource, such as your local

mail server, FTP server, and so on.

15 Click Finish to save changes to the sandbox.

Sandbox Considerations

Using OpenOffice within Sandbox

Grant permissions in sandbox for the following filepaths:

• D:\ColdFusion9\runtime\servers\lib Read

• D:\ColdFusion9\runtime\servers\lib\- Read

• D:\ColdFusion9\runtime\lib\- Read

• D:\ColdFusion9\runtime\lib Read

• C:\Program Files\OpenOffice.org 3\ Read, Execute

• C:\Program Files\OpenOffice.org 3\- Read

, Execute

Using Caching within Sandbox

For disk-based caching to work inside a sandbox, the sandbox must provide read/write permission to the disk cache

directory. This can be the default directory (

java.io.tmpdir) or a user-configured directory as identified by the

diskStore property.

The diskStore property in cf_root\lib\ehcache.xml is used to specify the directory for disk cache (<diskStore

path="java.io.tmpdir"/>).Use the following code to identify the temp directory:

writeoutput("Temp Dir : " &

createobject("java","java.lang.System").getProperty("java.io.tmpdir") );

</cfscript>