Community

For Better Security Use HtmlEditFormat() In Conjunction With JSStringFormat() In ColdFusion

(Ben Nadel) ColdFusion 9 (and earlier) provides several methods for escaping values in various contexts. ColdFusion 10 adds several more of these functions, with a nod to the OWASP security project. But, for the time-being, I wanted to talk about ColdFusion 9’s jsStringFormat() and htmlEditFormat()

Read More - Register for Free Membership