Adobe® ColdFusion® 10 Server Lockdown Guide
Adobe® ColdFusion® 10 Server Lockdown Guide
Adobe® ColdFusion® 10 Server Lockdown Guide
Create successful ePaper yourself
Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.
When the ColdFusion IIS connector installs it creates two virtual directories for each site the first is called<br />
jakarta, and is necessary for ColdFusion to process requests through IIS, and the second is CFIDE which can<br />
be removed.<br />
4.1.5 Setup Virtual Directory alias for /CFIDE/scripts/<br />
Because we have blocked /CFIDE/scripts and it is a security best practice to change the location of this to<br />
a non-default location we must setup a virtual directory in each site that relies on the assets in there.<br />
Here’s a short list of tags or features that may require /CFIDE/scripts: cfajaxproxy, cfcalendar, cfchart<br />
(HTML5), cfdiv, cfform, cfgrid, cflayout,cfmediaplayer,cfmenu cftextarea,cfpod, cfprogressbar, cfslider, cftooltip,<br />
cfwindow<br />
In this guide we choose a virtual directory mapping of /cf-scripts/ but you should choose a unique<br />
mapping name for your server.<br />
Once the virtual directory is in place you can update the ColdFusion administrator to specify the new URI for<br />
/CFIDE/scripts under the <strong>Server</strong> setting page:<br />
Replace /CFIDE/scripts/ with the new virtual directory URI, eg: /cf-scripts/<br />
45