Adobe 38043740 Lockdown Guide - Page 77

Disabling the GraphServlet, 6.5 Disabling Flash Remoting Servlet Mappings, Remove Servlet Mappings

Page 77 highlights

JWS Files are Java Web Services files most ColdFusion applications do not use them. To remove support, simply remove the servlet mapping: CFCServlet *.jws Note that the jws mapping should also be removed on your webserver. 6.4 Disabling the GraphServlet The GraphServlet is used to serve SWF's or images generated by cfchart and the deprecated cfgraph tags. Remove Servlet Mappings that point to the GraphServlet: GraphServlet /CFIDE/GraphData GraphServlet /CFIDE/GraphData.cfm 6.5 Disabling Flash Remoting Servlet Mappings If you are not using Flash or Flex Remoting, and don't plan on using the ColdFusion Server Monitor you can remove the the servlet mappings. Remove Servlet Mappings: 77

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87

77
JWS Files are Java Web Services files most ColdFusion applications do not use them. To remove support,
simply remove the servlet mapping:
<servlet-mapping id="coldfusion_mapping_10">
<servlet-name>CFCServlet</servlet-name>
<url-pattern>*.jws</url-pattern>
</servlet-mapping>
Note that the jws mapping should also be removed on your webserver.
6.4 Disabling the GraphServlet
The
GraphServlet
is used to serve SWF’s or images generated by
cfchart
and the deprecated
cfgraph
tags.
Remove Servlet Mappings that point to the GraphServlet:
<servlet-mapping id="coldfusion_mapping_2">
<servlet-name>GraphServlet</servlet-name>
<url-pattern>/CFIDE/GraphData</url-pattern>
</servlet-mapping>
<servlet-mapping id="coldfusion_mapping_11">
<servlet-name>GraphServlet</servlet-name>
<url-pattern>/CFIDE/GraphData.cfm</url-pattern>
</servlet-mapping>
6.5 Disabling Flash Remoting Servlet Mappings
If you are not using Flash or Flex Remoting, and don’t plan on using the ColdFusion Server Monitor you can
remove the the servlet mappings.
Remove Servlet Mappings:
<servlet-mapping id="coldfusion_mapping_0">