We will take a look at a free open source tool for checking your ColdFusion code for vulnerabilities. There are several rules that it can check for. Those include missing cfqueryparams and un-var scoped variables. The value of this code checker is that you can build rules for it.
So, if you find something that is not included in the tool it can be added. It can run in a browser or in the CommandBox CLI. We will take a deep dive into some legacy code to look for vulnerabilities and items that make up the best practice list. This application was developed to modernize and update about 300 legacy applications. The tool can also print all of the findings to an Excel spreadsheet with a link to the offending items.
To register for the webinar, please visit:
Download a 30 days free trial.
No credit card required.
Adobe Certified Professional
Washington, D.C. | Apr 23, 2020