Adobe 38043740 Lockdown Guide - Page 61
Missing Template, Handler, Site-wide Error, Maximum number, of POST request, parameters
![]() |
UPC - 883919135168
View all Adobe 38043740 manuals
Add to My Manuals
Save this manual to your list of manuals |
Page 61 highlights
Setting Missing Template Handler Default Recommendation Description Blank or /CFIDE/administra tor/templates/miss ing_template_erro r.cfm Specified The missing template handler HTML should be equivalent to the 404 error handler specified on your web server. The default missing template handler allows a potential attacker to get a rough idea of the ColdFusion version in use. Site-wide Error Handler Blank or /CFIDE/administra tor/templates/secu re_profile_error.cf m Specified The default site-wide error handler may expose information about the cause of exceptions. Specify a custom siite-wide error handler that discloses the same generic message to the user for all exceptions. Be sure to log the actual exception. Maximum number 100 of POST request parameters 100 or lower Set this to the maximum number of form fields you have on any given page. Allowing too many form fields may allow for a DOS attack known as HashDOS. 61
![](/manual_guide/products/adobe-38043740-lockdown-guide-7b304c4/61.png)