Charlie Arehart

Recent Blog Comments By Charlie Arehart

• Turning Off "InvalidTag" ScriptProtect Safely In ColdFusion 2021

  Posted on Feb 9, 2024 at 11:32 PM

  Hey, Ben. I notice in your post you say that you "disabled the ScriptProtect feature" by setting this.scriptProtect = true . I'm curious: wouldn't you think that would ENABLE it? And that setting it to FALSE should disable it? :-) More than that, I think I can explain why setting ... read more »

• Trying To Get The Most Trustworthy IP Address For A User In ColdFusion

  Posted on Oct 13, 2022 at 2:05 PM

  Welcome down the rabbit hole, Ben. :-) FWIW, I did a blog post on this in 2019, addressing cf, Lucee, cloudflare, and the Tomcat valve--including where to find it and how to put it in place. I also shared how that tomcat remoteip valve has still more to it, related to whether and how to tr... read more »

• Updated Thoughts On Validating Data In My Service Layer In ColdFusion

  Posted on Aug 20, 2022 at 3:10 PM

  As always, Ben, great to hear your thoughts and explorations on this. There was a post today in another blog on a related topic, and I thought of you and your post here. It's instead on testing the USE of feature flags (as well as mocking them, and more): https://reflectoring.io/testing-... read more »

• Looking At The Performance Overhead Of A Read-Only Lock In Lucee CFML 5.3.8.201

  Posted on Jun 24, 2022 at 4:59 PM

  Interesting thought experiment, Ben. If you'd been taking bets, I'd have put down good money that there'd be virtually NO impact in this scenario. The reason I say that may add some value to this post, whether one is using Lucee or ACF. And as the comment I was writing got longer and longer,... read more »

• Considering A Stale-While-Revalidate Pattern To Caching In ColdFusion

  Posted on Jun 21, 2022 at 12:04 PM

  Interesting, Ben. Thanks for sharing. I'd heard the episode yesterday and the discussion of that concept caught my attention as well. :-) But where you've gone pretty low-level and are caching at the component level--indeed at the variable level--I had heard it and wondered how one might tak... read more »

• Using jSoup To Clean-Up And Normalize HTML In ColdFusion 2021

  Posted on Feb 8, 2022 at 6:52 PM

  @Ben, Oh sure. I totally get that. And I had acknowledged (in the longer comment I opted to truncate) how that was likely your reasoning (or just being used to it). Again, my only reason for commenting was to help those who found the post but were NOT yet using javaloader, who might find t... read more »

• Using jSoup To Clean-Up And Normalize HTML In ColdFusion 2021

  Posted on Feb 8, 2022 at 5:52 PM

  Great stuff, Ben. Jsoup is indeed amazing: good on you and James for reminding folks about it. For those who may see Ben's use of javaloader here--and maybe have never used the this.javasettings he mentions, note that he shows using that in his 2012 jsoup post. If it may motivate some to c... read more »

• preserveCaseForStructKey Doesn't Work Inside Application.cfc In Adobe ColdFusion 2021

  Posted on Jan 7, 2022 at 4:23 PM

  @Ben, Ah, ok--on all counts. :-) So first, I'm not aware of any such IIS setting but someone else may chime in with one. Still, this may be a good point at which to talk about how CF (Lucee and ACF since CF2018 ) do indeed expose environment variables in the server scope, implicitly. In b... read more »

• preserveCaseForStructKey Doesn't Work Inside Application.cfc In Adobe ColdFusion 2021

  Posted on Jan 4, 2022 at 7:27 PM

  @Ben, Yep, sure, there would be value in avoiding i/o in loading the content on each request, whether for the server variable you were discussing before or these app settings. As for many possible options to do that (from env vars to caches to shared scopes, and more), there are pros and c... read more »

• preserveCaseForStructKey Doesn't Work Inside Application.cfc In Adobe ColdFusion 2021

  Posted on Jan 4, 2022 at 6:23 PM

  @Ben, Oh, for sure, such optimization is wise. Sometimes people are woefully unaware of potentially significant overhead in just their application.cfc/cfm processing (which can be all the more easy to miss when calling still other CFCs there, or using includes files or custom tags). But ... read more »

• preserveCaseForStructKey Doesn't Work Inside Application.cfc In Adobe ColdFusion 2021

  Posted on Jan 4, 2022 at 6:00 PM

  @Ben, Fair point, Ben. And tbh there are aspects of using those app settings which CAN get confusing, regarding how changing them may impact things. I've often wondered/wished to see documented if any aspects get loaded in such a way that the instantiation of the application cfc in memory ... read more »

• preserveCaseForStructKey Doesn't Work Inside Application.cfc In Adobe ColdFusion 2021

  Posted on Jan 4, 2022 at 3:47 PM

  @Ben, Ah, ok. If you changed it back to NOT quoted and the problem returned, then it's of course NOT about this need of recompilation. :-) It was because you DID find the change in behavior on your first changing it to quotes that I wondered if perhaps it was this issue--since doing that w... read more »

• preserveCaseForStructKey Doesn't Work Inside Application.cfc In Adobe ColdFusion 2021

  Posted on Jan 4, 2022 at 3:03 PM

  Hey, Ben, I wonder if the variations you see are an indication that you are being bit by this instead, from the docs on serializejson (where this setting's feature is most likely to be observed). Speaking of both the app-level setting and admin setting: "Note that this setting is used durin... read more »

• Referencing String Characters Using Array-Notation In ColdFusion 2021

  Posted on Nov 29, 2021 at 1:41 PM

  Thanks as always for sharing your discoveries, Ben. As for this, yes, it's supported as of Cf2018 and up. Here's that last code running on trycf as 2018: https://trycf.com/gist/75b3994be85aa042127e946905e29518/acf2018 and it fails if the url is changed to point to a cf2016. For some, ... read more »

• Getting Rollbar's Java SDK 1.7.10 Working In Adobe ColdFusion 2021

  Posted on Nov 9, 2021 at 12:47 PM

  Hey, Ben, it wasn't clear from this post (or I missed it): are you confirming that if you DID do just the createobject naming that one jar in Lucee, it would have worked without any need to also load also anywhere that slf4j-nop jar? Just curious, for the sake of understanding what's amiss. ... read more »

• From ColdFusion 10 To ColdFusion 2021 - Preparing For Some Blog Love

  Posted on Nov 3, 2021 at 2:29 PM

  Oh. Well, yeah. I guess so. :-) Sounds like a bit of an edge case, but if you or others ever trying it may find it doesn't work as expected, that would be something to certainly raise to Adobe at tracker.adobe.com (where example code and even java class files can be uploaded as attachments).... read more »

• From ColdFusion 10 To ColdFusion 2021 - Preparing For Some Blog Love

  Posted on Nov 3, 2021 at 10:38 AM

  Oh, and thanks for the mention (in the section title for your CF2021 "new feature" section). I gather you got that info from my talk, "hidden gems in cf2021". And of course you had acknowledged my hidden gems talks in your original version of this post--and thanks for tha... read more »

• From ColdFusion 10 To ColdFusion 2021 - Preparing For Some Blog Love

  Posted on Nov 3, 2021 at 10:34 AM

  I'm not sure about that, Ben. There would certainly be no impact outside the application (that's the main point of it being an app setting), but if you may mean that the classes/jars in the "root classloader" would conflict with those named in the javasettings.loadpaths (I forgot t... read more »

• From ColdFusion 10 To ColdFusion 2021 - Preparing For Some Blog Love

  Posted on Nov 3, 2021 at 8:51 AM

  Ben, really glad to see the addition of 2021. But as for the lack of the ability to name a jar on createobject/cf object, I hope you and readers are at least aware that you can load jars on a per-app basis (this.javasettings.loadpath), rather than rely otherwise solely on the old notion of h... read more »

• Reading Environment (ENV) Variables From The Server Scope In Lucee CFML 5.3.7.47

  Posted on Oct 27, 2021 at 12:42 PM

  FWIW, the server.system struct (and environment and properties under that) are available also in CF2018 and above. I appreciate that Ben's focus now is Lucee, and I don't want to jump in to every post and be "that guy". Still, since some folks using CF could find this, I wanted th... read more »