We will take a look at a free open source tool for checking your ColdFusion code for vulnerabilities. There are several rules that it can check for. Those include missing cfqueryparams and un-var scoped variables. The value of this code checker is that you can build rules for it.
So, if you find something that is not included in the tool it can be added. It can run in a browser or in the CommandBox CLI. We will take a deep dive into some legacy code to look for vulnerabilities and items that make up the best practice list. This application was developed to modernize and update about 300 legacy applications. The tool can also print all of the findings to an Excel spreadsheet with a link to the offending items.

To register for the webinar, please visit:

http://bit.ly/CFWebinar_CodeChecker

Comments
(5)
Share
Shreya Sinha
Newbie 4 posts
Followers: 0 people
Follow
Shreya Sinha Follow
Comments
(5)
Share
All Comments
Sort by:  Most Recent
  • Most Recent
  • Most Relevant
Stewart
2019-08-26 18:29:09

Was this webinar recorded?
Like
murpg
2019-05-21 12:09:01

Hi Charlie, you are correct it is indeed a fork of the Chris Weller repository. The difference being Brad Wood did a great job of making it a CommandBox module as well. I will be showing how to use it as a standalone tool and inside of the CommandBox CLI. https://www.forgebox.io/view/CodeChecker
Like
Charlie Arehart
2019-05-21 13:10:55

Ah, ok. Thanks, George. (I missed that the event link page indicated you were the presenter, or I would have asked you directly.)
Like
Kishore Balakrishnan
2019-05-21 04:34:05

Hi Charlie,

Would check with George and get back to you.
Like
Charlie Arehart
2019-05-14 11:34:49

Thanks for offering these sort of webinars. Can you confirm if this is about this tool :

https://github.com/wellercs/CodeChecker/

Or is it some other? Or perhaps a fork of it?
Like