>. The problem as I recall is that there wasn't a way to exclude one
specific type of CreateObject call.


Actually, you can lock it down by the type: COM, Java, CORBA, .Net (c8 +)
and Webservice or you can disable the entire function.

This is on CF 8 standard so it is server wide. No sandbox support on
standard but I assume (a dangerous thing to do with Mr. Watts here ;) ) that
it would behave the same for sandboxes (as it does on CF9 developer).

G!

On Tue, Nov 9, 2010 at 2:41 PM, Dave Watts <[email protected]> wrote:

>
> > I believe the issue is with createobject using Java, COM and CORBA and
> not
> > create object(component)
> >
> > From the OP:
> > CreateObject(COM)
> > CreateObject(CORBA)
> > CreateObject(JAVA)
>
> The problem as I recall is that there wasn't a way to exclude one
> specific type of CreateObject call. Again, though, I'm no expert with
> sandbox security and this may no longer be true.
>
> Dave Watts, CTO, Fig Leaf Software
> http://www.figleaf.com/
> http://training.figleaf.com/
>
> Fig Leaf Software is a Veteran-Owned Small Business (VOSB) on
> GSA Schedule, and provides the highest caliber vendor-authorized
> instruction at our training centers, online, or onsite.
>
> 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~|
Order the Adobe Coldfusion Anthology now!
http://www.amazon.com/Adobe-Coldfusion-Anthology/dp/1430272155/?tag=houseoffusion
Archive: 
http://www.houseoffusion.com/groups/cf-talk/message.cfm/messageid:339031
Subscription: http://www.houseoffusion.com/groups/cf-talk/subscribe.cfm
Unsubscribe: http://www.houseoffusion.com/groups/cf-talk/unsubscribe.cfm

Reply via email to