![]() |
||
|
Before you begin security sandbox configuration, analyze your application and its usage to determine the tags, functions, and resources that it requires. You can then configure the sandbox to enable access to the required resources and disable use of the appropriate tags and functions. For example, if the applications in the sandbox do not use the cfregistry
tag, you can safely disable it.
Note: In the Standard Edition, the Root Security Context is the only sandbox. There is no initial list of defined directory permissions.
A page with several tabs appears. This is the initial page in the Standard Edition. The remaining steps describe the use of each tab.
By default, ColdFusion pages in this sandbox can access all data sources.
Note: If <<ALL DATASOURCES>> is in the Enabled Datasources column, any data source that you add is enabled. If you move <<ALL DATASOURCES>> to the Disabled Datasources column, any new data source is disabled.
By default, ColdFusion pages in this sandbox can access all listed tags.
By default, ColdFusion pages in this sandbox can access all listed functions.
For example, select the Read check box to let ColdFusion pages in the mytestapps sandbox read files in the C:\pix directory.
The file path and its permissions appear in the Secured Files and Directories list.
The character after the backslash is important. For information, see About directories and permissions.
Note: The Files/Dirs tab works together with the file-based permissions of the operating system. To restrict a user from browsing another users directory, you must use file-based permissions.
cfmail
, cfpop
, cfldap
, cfhttp
, and so on). You can specify an IP address, a server name (such as www.someservername.com), or a domain name (such as someservername.com). You can optionally specify a port restriction.
Note: This behavior differs from other tabs, such as CFTags, where you select items to disable. If you set any values in this tab, external-resource tags executed in this sandbox can access only the specified servers and ports.
For example, to allow this sandbox access to 207.88.220.3 on ports 80 and lower, perform the following steps:
Tip: To deny access by these ColdFusion tags to an entire site, enable access for a local resource, such as your local mail server, FTP server, and so on.
|
||
![]() |