Request Filtering

Question

I installed CF 11 on a Windows 2008 R2 server as a fresh install on IIS7.

I used the "The Coldfusion 11 Lockdown Guide" which specifies to use 'Request Filtering' on page 17. It also states:

IMPORTANT: As of 4/10/14 in the latest CF11 build request filtering is not working or urls handled by Coldfusion. This needs to be fixed.

The the IIS portion of the guide is dependent upon the 'Request Filtering' working. Mine did not work either.

So, if you follow the steps your CF sites will not work, (neither will the administrator).

When can we expect this to be fixed?

Shouldn't the statement above be put on page 1 of the guide! A lot of work to get to the page only to find out it will fail.

Has anyone come up with a fix or workaround for this?

pete_freitag · Answer

Request Filtering should be working in the final CF11 build, that note you are seeing was pertaining to a Beta build of CF11.

Sign up