[Update 13 Dec]:
- Added cfencode.sh to the table of removals.
- Updated Customizing an HTTP response to HTTP reason phrases.
- Added contact email id cf-deprecation@adobe.com
In the upcoming ColdFusion (2025 release), we will deprecate and remove certain features to enhance the overall experience, improve security, stay aligned with the latest technological advancements, and eliminate obsolete libraries.
We announced the deprecations and removals on the ColdFusion pre-release forum a few days ago. If you haven’t already signed up, please do so today
As part of this exercise, we have analyzed data from various sources and identified features slated for deprecation and removal. Additionally, we are updating the deprecation lifecycle and terminology by removing the “Retired” status.
Definitions
- Deprecated: Adobe does not recommend using a deprecated feature in new application development. While no enhancements or modifications will be made to these features, Adobe will continue to provide critical bug fixes, including security patches, to maintain functionality as outlined in the documentation.
- Deprecated and Unsupported: Features in this category will not receive enhancements or modifications. However, if a security vulnerability or critical issue arises, Adobe will address it.
- Removed: Features categorized as removed will no longer be available in ColdFusion and cannot be used.
Impact of the updated deprecation lifecycle
- Deprecation in ColdFusion 2025: A feature marked for deprecation in CF 2025 will move to Deprecated and Unsupported in CF 2025+1.
- Eventual Removal in CF 2025+2: The feature will be entirely removed from the platform in CF 2025+2.
These changes are part of our commitment to delivering a secure, modern, and efficient ColdFusion platform. Thank you for your understanding and continued support as we transition to these updates.
Disclaimer: Adobe values customer feedback and considers it when reviewing policies. Changes may be made based on this input. This serves as a general disclaimer, as updates depend on the feedback received, ensuring we can effectively support our customers.
What will be deprecated in ColdFusion (2025 release)
| Feature | Remarks |
| CAR (ColdFusion Archive) migration | Use cfsetup as an alternative. |
| Java SecurityManager: SecurityManager was marked as deprecated for removal in Java Development Kit (JDK) 17 through JEP 411, meaning it is planned to be fully removed in future Java versions. | Java SecurityManager was used in ColdFusion Sandbox Security. |
| Legacy Cookie Processor support from the cfcookie tag: Tomcat 10.1 had removed support for Legacy Cookie Processor. | ColdFusion (2025 release) will support it to maintain backward compatibility. |
| ssh-rsa algorithm in fingerprint attribute in cfftp | Deprecated due to security issues. |
| MS Access and ODBC | No active development. |
| DB2 | No active development. |
Event gateway features:
|
No active development.
|
What will be removed in ColdFusion (2025 release)
The features that will be removed have either been deprecated in a previous ColdFusion release, or due to Adobe Flash or Flex removal, or due to the core libraries no longer supporting the features.
| Feature | Why is it removed |
| Mobile and all mobile-related features. | No active development. |
| License scanner: The License Scanner searches your local subnet to find other running instances of ColdFusion. | The Activation page in CF Admin already tracks license usage. |
| cfencode.exe/cfencode.sh utility, located in cfusion/bin | Due to security issues and lack of recent updates. |
|
Adobe has removed Adobe Flash and Flex. |
| CFMX_Compat encryption algorithm | In ColdFusion 2023 Update 8 and ColdFusion 2021 Update 14, we’d announced the removal of the flag in ColdFusion 2025. Alternatively, use any of the algorithms listed in the Encrypt function doc.
|
| Thread support | In ColdFusion 2025, we’ll upgrade to JDK21. JDK21 has removed the Thread.stop() method. To maintain compatibility, we’ll remove the terminate action in cfthread and the ThreadTerminate function in CF 2025. View this blog post for more details. |
| COM/DCOM | No active development. |
| XML Forms | No active development. |
| All remaining Flash and Flex jars. | Adobe has removed Adobe Flash and Flex. |
| AWS S3- ACL | Amazon has disabled access control lists for all new buckets starting in April 2023. View the post for more information. |
| Customizing an HTTP response. | Feature is no longer available since Tomcat 8.5. |
| cfheader StatusText attribute | Tomcat has already removed it. |
| Axis1 | Security issues. |
| Sybase | No active development. |
| Jadozoom database driver | No active development. |
The following table lists the features that will be removed because the features were deprecated in a previous version of ColdFusion.
| Feature | Deprecated in |
| The value fire_now from the attribute onmisfire of cfschedule. | Adobe ColdFusion (2021 release) |
| cfmediaplayer tag | Adobe ColdFusion (2018 release) |
| cfscript support for script-based CFCs, such as query and storedproc . | Adobe ColdFusion (2018 release) |
| Service layer CFC’s webservices, such as pdfs and images. | Adobe ColdFusion (2018 release) |
| GetMetricData parameter cacheops | Adobe ColdFusion (2018 release) |
| cftable function | Adobe ColdFusion (2018 release) |
| HTMLEditFormat function
Use the EncodeForHTML function as alternative. |
Adobe ColdFusion (2018 release) |
cfinsert attributes:
|
Adobe ColdFusion (2018 release)
|
| cfselect attribute passthrough | Adobe ColdFusion (2018 release) |
cfindex attributes:
Solr has removed these attributes. |
Adobe ColdFusion (2018 release)
|
cfsearch attributes:
|
Adobe ColdFusion (2018 release)
|
| cfchart– format=flash | Adobe ColdFusion (2016 release) |
The following UI tags based on YUI toolkit:
|
Adobe ColdFusion (2016 release) |
| cfapplet tag | Adobe ColdFusion (2016 release) |
| cfcollection attribute path | Adobe ColdFusion (2016 release) |
|
Impacted after deprecation of YUI and Spry libraries in ColdFusion (2016 release) Update 3.
passthrough was deprecated in Adobe ColdFusion (2018 release) |
| ParameterExists function
Use the isDefined function as an alternative. |
ColdFusion MX |
| GetTemplatePath function
Use the GetBaseTemplatePath function as an alternative. |
ColdFusion MX |
| Spanish (Mexican) locale in SetLocale function. | ColdFusion MX |
What This Means for You
We understand that these changes may impact your workflows and codebase. We encourage you to explore alternative solutions for the affected features as needed. The ColdFusion team is available to address any questions or concerns you may have and provide guidance during this transition.
What’s Next
We will keep you informed about future updates and are committed to supporting you throughout this process.
Thank you for your understanding and for being a valued ColdFusion user. We appreciate your continued trust in our platform.
Contact us
If you have any questions, feedback, or suggestions, please get in touch with us at cf-deprecation@adobe.com
Staff
16 posts
You must be logged in to post a comment.
23 Nov
10AM Pacific
Online
