Dick Applebaum wrote: > > Does anyone know if MM plans to address this in future updates or > releases -- It would be nice if there were a way that CFMX could secure > some of these things and still allow CFObject. > > Possible?
Not likely. There is simply no way to look into an object to see what it does, just like cfexecute has no way of knowing what an executable does. Both of them had the same problem on previous versions (well, they could have fixed it for OS Sandboxes by making it use CreateProcessAsUser() instead of CreateProcess() (see MPSB01-11), but OS Sandbxes are no longer working). Jochem ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~| Archives: http://www.houseoffusion.com/cf_lists/index.cfm?forumid=4 Subscription: http://www.houseoffusion.com/cf_lists/index.cfm?method=subscribe&forumid=4 FAQ: http://www.thenetprofits.co.uk/coldfusion/faq This list and all House of Fusion resources hosted by CFHosting.com. The place for dependable ColdFusion Hosting.

