Adobe 38043740 Lockdown Guide - Page 19

or WSRP. The API does, CFIDE/scheduler

Page 19 highlights

/CFIDE/multiservermonitoraccess-policy.xml Used to set a policy for allowing viewing the server monitor from multiple domains. Yes - the server monitor now runs on its own web server on port 5500. /CFIDE/orm Contains interfaces used with Yes ORM. These interfaces do not need to be accessible through the web server. /CFIDE/portlets Contains API for building Yes portlets with JSR-286, JSR- 168 or WSRP. The API does not need to be accessible through the web server. /CFIDE/probe.cfm /CFIDE/scheduler You can configure probes in the ColdFusion administrator which are used to monitor a URL for failures. This will throw an exception if not run over 127.0.0.1. Yes, however if you want to use probes you should create a web site that only listens on 127.0.0.1 and remove this block. Contains an interface for Yes scheduled task event handlers. Does not need to be accessible through the web server. /CFIDE/scripts Contains javascript and other assets for several ColdFusion features cfform, cfchart, ajax tags, etc. Yes - we will create a new, non default URI for this folder, and specify the new URI in the ColdFusion administrator. 19

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87

19
/CFIDE/multiservermonitor-
access-policy.xml
Used to set a policy for
allowing viewing the server
monitor from multiple
domains.
Yes - the server monitor now runs on its
own web server on port 5500.
/CFIDE/orm
Contains interfaces used with
ORM. These interfaces do
not need to be accessible
through the web server.
Yes
/CFIDE/portlets
Contains API for building
portlets with JSR-286, JSR-
168 or WSRP. The API does
not need to be accessible
through the web server.
Yes
/CFIDE/probe.cfm
You can configure probes in
the ColdFusion administrator
which are used to monitor a
URL for failures. This will
throw an exception if not run
over 127.0.0.1.
Yes, however if you want to use probes
you should create a web site that only
listens on 127.0.0.1 and remove this
block.
/CFIDE/scheduler
Contains an interface for
scheduled task event
handlers. Does not need to
be accessible through the
web server.
Yes
/CFIDE/scripts
Contains javascript and other
assets for several ColdFusion
features cfform, cfchart, ajax
tags, etc.
Yes - we will create a new, non default
URI for this folder, and specify the new
URI in the ColdFusion administrator.