<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>B and E Blog &#187; ColdFusion</title>
	<atom:link href="http://www.bandeblog.com/cat/programming/coldfusion-programming/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.bandeblog.com</link>
	<description>Just a couple of opinionated nerds talking about ColdFusion, PHP, and technology in general.</description>
	<lastBuildDate>Tue, 27 Oct 2009 21:04:42 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>ColdFusion: XSS Vulnerability in SerializeJSON()</title>
		<link>http://www.bandeblog.com/2009/08/coldfusion-xss-vulnerability-in-serializejson/</link>
		<comments>http://www.bandeblog.com/2009/08/coldfusion-xss-vulnerability-in-serializejson/#comments</comments>
		<pubDate>Sat, 01 Aug 2009 14:28:20 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[Bugs]]></category>
		<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[JSON]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[Software]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=79</guid>
		<description><![CDATA[There is a minor vulnerability in ColdFusion&#8217;s SerializeJSON() method.  ColdFusion fails to escape object keys correctly.
Here is a typical example of the expected way to use SerializeJSON():
&#60;cfset foo = StructNew()&#62;
	&#60;cfset foo['bar'] = 'Bar!'&#62;
	&#60;cfoutput&#62;
		&#60;script language='javascript'&#62;
		var foo = #serializeJSON(foo)#;
		&#60;/script&#62;
	&#60;/cfoutput&#62;
The output of this is:
&#60;script language='javascript'&#62;
var foo = {&#34;bar&#34;:&#34;Bar!&#34;};
&#60;/script&#62;
The bug is that object keys are not properly escaped, [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/08/coldfusion-xss-vulnerability-in-serializejson/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ColdFusion: SerializeJSON() Recursion Error</title>
		<link>http://www.bandeblog.com/2009/07/coldfusion-serializejson-recursion-error/</link>
		<comments>http://www.bandeblog.com/2009/07/coldfusion-serializejson-recursion-error/#comments</comments>
		<pubDate>Fri, 31 Jul 2009 13:46:22 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[Bugs]]></category>
		<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[JSON]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[Software]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=72</guid>
		<description><![CDATA[In ColdFusion 8, Adobe introduced a new function called SerializeJSON(), which takes a single object of just about any type and returns a JSON representation of that object and its properties.  This can include objects which are not native ColdFusion types such as a Java object, and it does a respectable job of figuring out [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/07/coldfusion-serializejson-recursion-error/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ColdFusion: Using Java Beans</title>
		<link>http://www.bandeblog.com/2009/06/coldfusion-using-java-beans/</link>
		<comments>http://www.bandeblog.com/2009/06/coldfusion-using-java-beans/#comments</comments>
		<pubDate>Tue, 09 Jun 2009 21:47:18 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=50</guid>
		<description><![CDATA[A while back we were working on a huge new website in ColdFusion which was a rearchitecture of an extremely mature but very worn out code base.  One of the biggest things we wanted to do was adopt a substantially more object oriented approach to development as the original site was started in the [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/06/coldfusion-using-java-beans/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CF.Objective() So Far</title>
		<link>http://www.bandeblog.com/2009/05/cfobjective-so-far/</link>
		<comments>http://www.bandeblog.com/2009/05/cfobjective-so-far/#comments</comments>
		<pubDate>Thu, 14 May 2009 20:00:29 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[CF.Objective()]]></category>
		<category><![CDATA[Conference]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=38</guid>
		<description><![CDATA[So far I&#8217;ve been to two really good sessions at CF.Objective().  The first I was dubious about, &#8220;Indiana Jones and the Server of Doom,&#8221; but I actually learned some things about low-level memory management within ColdFusion, and I can definitely say I&#8217;ve got something new to check out on production boxes when I get [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/05/cfobjective-so-far/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>ColdFusion Ordered Struct</title>
		<link>http://www.bandeblog.com/2009/05/coldfusion-ordered-struct/</link>
		<comments>http://www.bandeblog.com/2009/05/coldfusion-ordered-struct/#comments</comments>
		<pubDate>Tue, 12 May 2009 21:16:29 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=37</guid>
		<description><![CDATA[As most readers probably already know, in ColdFusion, structs are associatively keyed storage structures similar to an array but where you get to use a string to key an entry rather than only a sequential number.
PHP only has array() which acts both like ColdFusion&#8217;s array and struct both.  You can numerically key arrays or [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/05/coldfusion-ordered-struct/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>CF.Objective() Here I Come</title>
		<link>http://www.bandeblog.com/2009/05/cfobjective-here-i-come/</link>
		<comments>http://www.bandeblog.com/2009/05/cfobjective-here-i-come/#comments</comments>
		<pubDate>Tue, 12 May 2009 20:28:58 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=35</guid>
		<description><![CDATA[Heading off to Minneapolis tomorrow morning for CF.Objective().  This is the first conference I&#8217;ve been to in a while.  Hoping we get to hear some about the next version of ColdFusion and the Bolt IDE (I&#8217;ve played with it some; I can&#8217;t say a lot, but I can say that it&#8217;s got some fanstastic features).
]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/05/cfobjective-here-i-come/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ColdFusion Including Sub-Applications</title>
		<link>http://www.bandeblog.com/2008/05/coldfusion-including-sub-applications/</link>
		<comments>http://www.bandeblog.com/2008/05/coldfusion-including-sub-applications/#comments</comments>
		<pubDate>Fri, 30 May 2008 17:20:58 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[application.cfc]]></category>
		<category><![CDATA[kludge]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=34</guid>
		<description><![CDATA[Ben Nadel has an interesting question on his blog about including sub-applications from within an existing CF application, and having the relevant sub-level Application.cfc fire off.
This is doable in a fairly simple manner but which relies on a barely-documented feature of ColdFusion, and the fact that the sub-level Application.cfc fires is completely undocumented, and may [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2008/05/coldfusion-including-sub-applications/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>Relative CFLoop Performance for Various Loop Structures</title>
		<link>http://www.bandeblog.com/2008/05/relative-cfloop-performance-for-various-loop-structures/</link>
		<comments>http://www.bandeblog.com/2008/05/relative-cfloop-performance-for-various-loop-structures/#comments</comments>
		<pubDate>Wed, 21 May 2008 18:01:26 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[lists]]></category>
		<category><![CDATA[loop]]></category>
		<category><![CDATA[performance]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=32</guid>
		<description><![CDATA[Introduction
Jim over at Ben Nadel&#8217;s blog made the assertion that looping a list is faster than looping a struct.  It&#8217;s an interesting assertion that looping a list would be faster than looping an array.  I did a test of my own to find out.
Setup
Starting with objects with 1 entry populated, I increased the number of [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2008/05/relative-cfloop-performance-for-various-loop-structures/feed/</wfw:commentRss>
		<slash:comments>6</slash:comments>
		</item>
		<item>
		<title>CFThread and dividing up work</title>
		<link>http://www.bandeblog.com/2008/04/cfthread-and-dividing-up-work/</link>
		<comments>http://www.bandeblog.com/2008/04/cfthread-and-dividing-up-work/#comments</comments>
		<pubDate>Wed, 23 Apr 2008 17:17:00 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[threads]]></category>

		<guid isPermaLink="false">http://boole.mightye.org/wordpress/?p=20</guid>
		<description><![CDATA[CFThread is a wonderful addition to ColdFusion 8.  It lets you perform parallel actions within your code.  However, parallel programming is a complex beast under the best of circumstances.
One of the early things to realize in CF8&#8217;s threading support is that it makes a deep copy of the local variables (ala Duplicate()) when [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2008/04/cfthread-and-dividing-up-work/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>ColdFusion 8.0.1 &#8211; Nested Array/Struct Shorthand</title>
		<link>http://www.bandeblog.com/2008/04/coldfusion-801-nested-arraystruct-shorthand/</link>
		<comments>http://www.bandeblog.com/2008/04/coldfusion-801-nested-arraystruct-shorthand/#comments</comments>
		<pubDate>Thu, 10 Apr 2008 11:39:00 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://boole.mightye.org/wordpress/?p=19</guid>
		<description><![CDATA[As you probably know, ColdFusion 8 gave us a long-needed shorthand for creating arrays and structures:
a = &#34;1&#34;,
b = &#34;2&#34;,
c = &#34;3&#34;
}&#38;gt;
&#34;a&#34;,
&#34;b&#34;,
&#34;c&#34;
]&#38;gt;
Unfortunately you couldn&#8217;t nest those constructs.  With the 8.0.1 updater though, you now can:
a = [&#34;x&#34;, &#34;y&#34;, &#34;z&#34;],
b = [&#34;s&#34;, &#34;t&#34;, &#34;u&#34;],
c = [&#34;m&#34;, &#34;n&#34;, &#34;o&#34;]
}&#38;gt;
This is fantastic when you&#8217;re trying to make [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2008/04/coldfusion-801-nested-arraystruct-shorthand/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
