Slides from my 2019 ColdFusion Summit Las Vegas Talk

Updated , First Published by Pete Freitag

Update: For my latest ColdFusion security info, watch my ColdFusion security training course.


The slides for my talk Approaches to secure CFML code can be found here. The source code for the Bank of Insecurity application (which is full of security holes) can be found: here.

Overall I thought the CFSummit event was a great success. It was also cool to see that nearly half of the 500 attendees were attending their first CFSummit.

I also really like how Adobe is focusing its attention for ColdFusion 2020. The module aware installer will hopefully help reduce the attack surface of our deployments by only installing the stuff you actually need/use.

The Fixinator Code Security Scanner for ColdFusion & CFML is an easy to use security tool that every CF developer can use. It can also easily integrate into CI for automatic scanning on every commit.