<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>B and E Blog</title>
	<atom:link href="http://www.bandeblog.com/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.bandeblog.com</link>
	<description>Just a couple of opinionated nerds talking about ColdFusion, PHP, and technology in general.</description>
	<lastBuildDate>Tue, 27 Oct 2009 21:04:42 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>Chrome AdBlock Extension</title>
		<link>http://www.bandeblog.com/2009/10/chrome-adblock-extension/</link>
		<comments>http://www.bandeblog.com/2009/10/chrome-adblock-extension/#comments</comments>
		<pubDate>Tue, 27 Oct 2009 21:04:42 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[Uncategorized]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=92</guid>
		<description><![CDATA[Fed up with an ad-laden Internet being practically useless compared to the ad-free version, I searched for a Chrome extension for blocking ads.  There was one out there that I could find, but it was mediocre at best.  Probably its largest problem being the lack of good ad blocking rules.
AdBlock Plus for Firefox [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/10/chrome-adblock-extension/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>Merging GET &amp; POST Data Leads to Sloppy Programming</title>
		<link>http://www.bandeblog.com/2009/08/merging-get-post-data-leads-to-sloppy-programming/</link>
		<comments>http://www.bandeblog.com/2009/08/merging-get-post-data-leads-to-sloppy-programming/#comments</comments>
		<pubDate>Tue, 04 Aug 2009 15:01:24 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[Opinion]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=48</guid>
		<description><![CDATA[Under typical situations when writing web applications, there are two ways that you can pass user data to the webserver.  GET and POST, which line up with the HTTP verbs of the same names.  Of course there are quite a few other verbs, but these are the two which are used more than [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/08/merging-get-post-data-leads-to-sloppy-programming/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ColdFusion: XSS Vulnerability in SerializeJSON()</title>
		<link>http://www.bandeblog.com/2009/08/coldfusion-xss-vulnerability-in-serializejson/</link>
		<comments>http://www.bandeblog.com/2009/08/coldfusion-xss-vulnerability-in-serializejson/#comments</comments>
		<pubDate>Sat, 01 Aug 2009 14:28:20 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[Bugs]]></category>
		<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[JSON]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[Software]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=79</guid>
		<description><![CDATA[There is a minor vulnerability in ColdFusion&#8217;s SerializeJSON() method.  ColdFusion fails to escape object keys correctly.
Here is a typical example of the expected way to use SerializeJSON():
&#60;cfset foo = StructNew()&#62;
	&#60;cfset foo['bar'] = 'Bar!'&#62;
	&#60;cfoutput&#62;
		&#60;script language='javascript'&#62;
		var foo = #serializeJSON(foo)#;
		&#60;/script&#62;
	&#60;/cfoutput&#62;
The output of this is:
&#60;script language='javascript'&#62;
var foo = {&#34;bar&#34;:&#34;Bar!&#34;};
&#60;/script&#62;
The bug is that object keys are not properly escaped, [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/08/coldfusion-xss-vulnerability-in-serializejson/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ColdFusion: SerializeJSON() Recursion Error</title>
		<link>http://www.bandeblog.com/2009/07/coldfusion-serializejson-recursion-error/</link>
		<comments>http://www.bandeblog.com/2009/07/coldfusion-serializejson-recursion-error/#comments</comments>
		<pubDate>Fri, 31 Jul 2009 13:46:22 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[Bugs]]></category>
		<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[JSON]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[Software]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=72</guid>
		<description><![CDATA[In ColdFusion 8, Adobe introduced a new function called SerializeJSON(), which takes a single object of just about any type and returns a JSON representation of that object and its properties.  This can include objects which are not native ColdFusion types such as a Java object, and it does a respectable job of figuring out [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/07/coldfusion-serializejson-recursion-error/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ColdFusion: Using Java Beans</title>
		<link>http://www.bandeblog.com/2009/06/coldfusion-using-java-beans/</link>
		<comments>http://www.bandeblog.com/2009/06/coldfusion-using-java-beans/#comments</comments>
		<pubDate>Tue, 09 Jun 2009 21:47:18 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=50</guid>
		<description><![CDATA[A while back we were working on a huge new website in ColdFusion which was a rearchitecture of an extremely mature but very worn out code base.  One of the biggest things we wanted to do was adopt a substantially more object oriented approach to development as the original site was started in the [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/06/coldfusion-using-java-beans/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>One Man&#8217;s View is Another Man&#8217;s Data</title>
		<link>http://www.bandeblog.com/2009/05/one-mans-view-is-another-mans-data/</link>
		<comments>http://www.bandeblog.com/2009/05/one-mans-view-is-another-mans-data/#comments</comments>
		<pubDate>Tue, 19 May 2009 12:46:13 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[Frameworks]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[Software]]></category>
		<category><![CDATA[HCI]]></category>
		<category><![CDATA[MVC]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=43</guid>
		<description><![CDATA[I think it&#8217;s common for a developer to get the idea in his or her head that developing under an MVC (Model View Controller) paradigm is ultra cut and dry: There is one Model, one View, and one Controller for a given task.  Within a given layer of the software stack this may often [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/05/one-mans-view-is-another-mans-data/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CF.Objective() So Far</title>
		<link>http://www.bandeblog.com/2009/05/cfobjective-so-far/</link>
		<comments>http://www.bandeblog.com/2009/05/cfobjective-so-far/#comments</comments>
		<pubDate>Thu, 14 May 2009 20:00:29 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[CF.Objective()]]></category>
		<category><![CDATA[Conference]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=38</guid>
		<description><![CDATA[So far I&#8217;ve been to two really good sessions at CF.Objective().  The first I was dubious about, &#8220;Indiana Jones and the Server of Doom,&#8221; but I actually learned some things about low-level memory management within ColdFusion, and I can definitely say I&#8217;ve got something new to check out on production boxes when I get [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/05/cfobjective-so-far/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
		<item>
		<title>ColdFusion Ordered Struct</title>
		<link>http://www.bandeblog.com/2009/05/coldfusion-ordered-struct/</link>
		<comments>http://www.bandeblog.com/2009/05/coldfusion-ordered-struct/#comments</comments>
		<pubDate>Tue, 12 May 2009 21:16:29 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[PHP]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=37</guid>
		<description><![CDATA[As most readers probably already know, in ColdFusion, structs are associatively keyed storage structures similar to an array but where you get to use a string to key an entry rather than only a sequential number.
PHP only has array() which acts both like ColdFusion&#8217;s array and struct both.  You can numerically key arrays or [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/05/coldfusion-ordered-struct/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>CF.Objective() Here I Come</title>
		<link>http://www.bandeblog.com/2009/05/cfobjective-here-i-come/</link>
		<comments>http://www.bandeblog.com/2009/05/cfobjective-here-i-come/#comments</comments>
		<pubDate>Tue, 12 May 2009 20:28:58 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=35</guid>
		<description><![CDATA[Heading off to Minneapolis tomorrow morning for CF.Objective().  This is the first conference I&#8217;ve been to in a while.  Hoping we get to hear some about the next version of ColdFusion and the Bolt IDE (I&#8217;ve played with it some; I can&#8217;t say a lot, but I can say that it&#8217;s got some fanstastic features).
]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2009/05/cfobjective-here-i-come/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
		<item>
		<title>ColdFusion Including Sub-Applications</title>
		<link>http://www.bandeblog.com/2008/05/coldfusion-including-sub-applications/</link>
		<comments>http://www.bandeblog.com/2008/05/coldfusion-including-sub-applications/#comments</comments>
		<pubDate>Fri, 30 May 2008 17:20:58 +0000</pubDate>
		<dc:creator>Eric</dc:creator>
				<category><![CDATA[ColdFusion]]></category>
		<category><![CDATA[Programming]]></category>
		<category><![CDATA[application.cfc]]></category>
		<category><![CDATA[kludge]]></category>

		<guid isPermaLink="false">http://www.bandeblog.com/?p=34</guid>
		<description><![CDATA[Ben Nadel has an interesting question on his blog about including sub-applications from within an existing CF application, and having the relevant sub-level Application.cfc fire off.
This is doable in a fairly simple manner but which relies on a barely-documented feature of ColdFusion, and the fact that the sub-level Application.cfc fires is completely undocumented, and may [...]]]></description>
		<wfw:commentRss>http://www.bandeblog.com/2008/05/coldfusion-including-sub-applications/feed/</wfw:commentRss>
		<slash:comments>2</slash:comments>
		</item>
	</channel>
</rss>
