#Adobe ColdFusion to Lucee

[lucid-outsourcing-solutions]

Adobe ColdFusion to Lucee Migration

[gamesover2600]

Unicode Domains Validated Differently Email vs URL

While sanitizing domains, I identified that ColdFusion (& Lucee) isValid() treats unicode domains differently when validating “email” versus “URL”. If java.netURL or HTML5 field URL validation is used to validate a URL containing a domain with a unicode character, it returns TRUE... but not isValid(”URL”).

I know that isValid(”email”) is currently too liberal and incorrectly returns TRUE if (“Testy McTest” <test@test.com>) is tested, but I’m not sure of the logic used for URL testing.  We’ve had issues in the past when isvalid() returned FALSE for Microsoft OneDrive URLs and stopped using built-in validation as we had no way of really knowing what works and what doesn’t.  (Does anyone have a publicly available unit test that Adobe uses for these functions?)

Here’s the Adobe Bug CF-4204516: https://tracker.adobe.com/#/view/CF-4204516

Here’s a GIST with sample domains: https://gist.github.com/JamoCA/4f9951753f2fe3ed79ef5d7945d2f926

Here’s a link to TryCF: https://www.trycf.com/gist/4f9951753f2fe3ed79ef5d7945d2f926

[laravelvuejs]

018 VUE More With Less, with John Farrar, pt.2

018 VUE More With Less, with John Farrar, pt.2

[ad_1]

John Farrar talks about “VUE more with less” in this episode of ColdFusion Alive podcast with host Michael Smith.

Episode topics

What is VueJS? A progressive web app (not single page app) Closer to a desktop app in behavior How to know when to jump into a new framework Why he used to avoid JavaScript (and how it advanced ColdFusion) Why he moved beyond jQuery What problems do the JS…

[bugtrackersoftware]

Adobe ColdFusion Blog | Filing issues for things like CF docs, Docker images, PMT, CFFiddle, and even the bug tracker itself https://t.co/syxfEAVzjE @coldfusion #cfml #lucee #webdev via @cfbloggers

[lucid-outsourcing-solutions]

Which Is Better, Adobe ColdFusion or Lucee, for New Projects?

[gamesover2600]

Email Validation has Changed in ColdFusion 11, 2016 & 2018... or is it broken?

I recently upgraded an application to ColdFusion 2016 and clients started reporting issues with their outbound email sent through a third-party transaction email service.  We had a ColdFusion routine configured to check isValid(”email”) and, if invalid, parse the display name + email address so that we can pass the “name” and “email” separately.  This stopped working and started passing the entire “display name + email” as both the “name” and “email” as a result of an undocumented change.

This is extremely frustrating as no other technology I use will validate “display name + email” as a valid email address... not even the HTML5 INPUT field.

I’ve been burned by isvalid(”email”) before and wrote my own UDF that I’ve added my own rules around. (The UDF also uses a java isEmail library to perform an optional reverse DNS lookup for MX and checks to see that a server exists.)  I’ve updated our global UDF library to check for <, >, “ and spaces to determine if a “display name” is included. If detected, the string is immediately rejected as a valid email. This appears to be broken on ColdFusion 11, 2016, 2018 and all Railo/Lucee that I’ve used the string "Testy McTest” <test@test.com> with. (NOTE: You may want to change the test email to something else. My isEmail() UDF automatically rejects “test.com” because the domain is primarily used by bots, hackers & lazy marketing agents testing forms.)

If an email address consists of a “local-part, an @ symbol, then a case-insensitive domain“, why does CFML’s updated email validation also accept a “display name” value?  (Again, if you check the isValid() page, there’s absolutely no indication that the function behaves differently from how it has in the past.)  If you, or a third-party technology that you work with, doesn’t agree with Adobe, please upvote bug 4204100: https://tracker.adobe.com/#/view/CF-4204100

3/15/2019 UPDATE:  Email addresses over 73 characters will evaluate as “valid”, but CF2016u10 currently throws a “The label in the input is too long″ error when used in CFMail.  IP addresses are also accepted as domain names, but may not be routeable. Single word hostnames (no dot) are also valid (ie, “test@gmail”), but should not be used as DNS look-ups will likely fail. Check it out for yourself.  I have same sample CFML code here: https://gist.github.com/JamoCA/e160736354d1d9c21d181c0c0e988077

and an online demo here (I noticed that it sometimes throws an error even though the CFML is valid.): https://www.trycf.com/gist/e160736354d1d9c21d181c0c0e988077

Here’s a link to CFFiddle. https://cffiddle.org/app/file?filepath=186c5ed9-5a40-413b-bf42-4752506407fb/abe887b0-63a1-4720-8d4b-f1a3d95d219a/ddba9a15-8dd1-4c4c-bffb-7d8d0e60258d.cfm

[gamesover2600]

Convert XML to JSON in 1 line of code using ColdFusion

This article has been moved to https://dev.to/gamesover/convert-xml-to-json-in-1-line-of-code-using-coldfusion-3dec.

I was researching methods of converting XML to JSON using ColdFusion. I didn’t want to use xmlParse() because I didn’t want to have to iterate over an XML object. CoolUtils offers a GUI/commandline Total XML Converter that is capable of converting XML to JSON, CSV and SQL code. (Very cool indeed!)  I found a couple other possibilities like Xidel, but it required that I provide a fair amount of information in order to convert.

I found a java blog entry titled “Java library to convert XML to JSON” and thought it was worth checking out. While adding the JAR to my server, I noticed that it worked without having to reboot.  I thought it may have loaded automatically, but soon determined it was due to the fact that CF2016′s “cfusion/lib/closure-compiler.jar” already supports the same “org.json.xml” class files.  This means that I only need to download the most recent JSON jars if I wanted to upgrade a couple of older CF10 servers.

I’ve tested it with some USPS, real estate and RSS XML files and it seems to work ok.  I noticed that some numeric values were converted to scientific notation in the JSON file and I’m going to review to determine if this is normal or not, but other than that it was extremely fast and will hopefully be easier to consume and make it easier to exchange data with other APIs.

Here’s some sample CFML code. https://www.trycf.com/gist/00bb362672f772fab56d26f3e01ad3fa/acf11

While testing this online in order to share, I noticed that the official Adobe CFFiddle doesn’t allow createObject() which means you can really only test this on TryCF.com. I also noticed that it didn’t work on Lucee, but only because they don’t have the supporting Java libraries installed.

NOTE: If you want to retain XML numbers, you'll need to use JavaLoader and use a newer version of JSON-Java that supports a secondary "true" argument. This will safely convert number values to text strings instead of converting to scientific notation or rounding.

Here's the CFML source code on gist.

11/13/2019: I tested this technique against some OWASP malicious XML samplesand the good data was parsed without any error while the bogus data appeared to be ignored. Both ColdFusion's xmlparse and Foundeo's SafeXMLParse encountered parsing issues and returned an error.

[laravelvuejs]

018 VUE More With Less, with John Farrar pt.1

018 VUE More With Less, with John Farrar pt.1

John Farrar talks about “VUE more with less” in this episode of ColdFusion Alive podcast with host Michael Smith.

Episode topics

What is VueJS? A progressive web app (not single page app) Closer to a desktop app in behavior How to know when to jump into a new framework Why he used to avoid JavaScript (and how it advanced ColdFusion) Why he moved beyond jQuery What problems do the JS frameworks…

[bugtrackersoftware]

Adobe ColdFusion Blog | Filing issues for things like CF docs, Docker images, CFFiddle, PMT, and even the bug tracker itself https://t.co/syxfEAVzjE @coldfusion #cfml #lucee #webdev via @cfbloggers

[gamesover2600]

isValid(”URL”) has changed in ColdFusion 2016 - Will CF10 be updated before Core Support Ends?

I tried saving a Microsoft OneDrive URL using a ColdFusion app I had written and couldn’t because CF10 (&11) indicated it wasn’t a valid URL... but CF2016 indicates it is valid.  Will CF10.0.22 be updated with the new built-in function (BIF) before core support ends on 5/16/2107?  Have other BIFs been updated in CF2016 but not updated in CF10/11 in an attempt to force upgrades to CF2016?  (NOTE: Lucee 4.5 & 5 both return the correct result.)

Here’s a short, self-contained, correct example that verifies that it’s broken. https://gist.github.com/JamoCA/af153f0b1693672e605ad1ea7d7807aa

Test the results on CF10, 11 and 2016 using TryCF.com... http://trycf.com/editor/gist/af153f0b1693672e605ad1ea7d7807aa (NOTE: You can also download CommandBox and run this using latest versions of each ColdFusion engine.)

My recommendation is to avoid using Adobe's blackbox built-in functions (BIFs) until they post unit tests demonstrating that they've fully tested them.