Clark, IMO scriptprotect is a total and utter waste of time. Abandon it. If you're interested in something better, and more comprehensive, take a look at John's Portcullis component, or my cf_xssblock tag. Typically I use my tag in application (cfm or cfc), rather than on a per-page basis, but it will also work easily on a per-page basis.
________________________________ From: Clarke Bishop <[email protected]> To: [email protected] Sent: Tue, January 19, 2010 5:41:26 PM Subject: [ACFUG Discuss] ScriptProtect="none" I know it’s a good practice to use CF’s ScriptProtect feature. But, I have an admin page in a CMS, and I need to be able to turn off ScriptProtect for that page. Otherwise, CF inserts <InvalidTag> messages! Is there a way to turn off ScriptProtect for one page only? Thanks for any ideas! Clarke ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by FusionLink ------------------------------------------------------------- ------------------------------------------------------------- To unsubscribe from this list, manage your profile @ http://www.acfug.org?fa=login.edituserform For more info, see http://www.acfug.org/mailinglists Archive @ http://www.mail-archive.com/discussion%40acfug.org/ List hosted by http://www.fusionlink.com -------------------------------------------------------------
