Error on forms with 100+ inputs after installing ColdFusion Security Hotfix APSB12-06

[cherdt]

I recently installed ColdFusion Security Hotfix APSB12-06 (http://helpx.adobe.com/coldfusion/kb/coldfusion-security-hotfix.html).

After the installation, forms that have more than 100 inputs produce a 500 - Internal server error.

[12Robots]

To change postParameterLimit, go to {ColdFusion-Home}/lib for Server installation or {ColdFusion-Home}/WEB-INF/cfusion/lib for Multiserver or J2EE installation and Open neo-runtime.xml

Add this line with the number of form fields you wish to allow.

<var name=’postSizeLimit’><number>100.0</number></var>

[cherdt]

Thanks for your reply. I was unaware of this setting. Presumably it was always present, and the error is therefore unrelated to the recent security hotfix?

The value is currently set to 500.0 on the server in question, so I'm not sure why it is throwing an error at 101.

[cherdt · Accepted solution]

I just noticed this note in the HotFix instructions:

• Customers who want to change postParameterLimit, go to {ColdFusion-Home}/lib for Server installation or {ColdFusion-Home}/WEB-INF/cfusion/lib for Multiserver or J2EE installation. Open file neo-runtime.xml, after line

1	"<var name='postSizeLimit'><number>100.0</number></var>"

          add the below line and you can change 100 with desired number.

1	"<var name='postParametersLimit'><number>100.0</number></var>"

I'll try that

[12Robots]

That's what I meant to copy and something got hosed up when I reformatted after pasting.