7.0.2 Sandbox Security

[elarin]

ColdFusion MX 7.0.2 with Security Sandbox Enabled:

It seems if you call a custom tag in the custom tags folder located outside
the sandbox security directory, it will obey the rules of the sandbox of the
site that called it.

I read somewhere that it doesn't behave this way in MX 6. Instead, the custom
tag will have FULL access to all tags, functions, and paths.

So is this a bug in 7.0.2 or an implementation change?

Regards,
Erick

[Jochem van Dieten **AdobeCommunityExpert**]

elarin wrote:

> ColdFusion MX 7.0.2 with Security Sandbox Enabled:
>
> It seems if you call a custom tag in the custom tags folder located outside
> the sandbox security directory, it will obey the rules of the sandbox of the
> site that called it.
>
> I read somewhere that it doesn't behave this way in MX 6. Instead, the custom
> tag will have FULL access to all tags, functions, and paths.

Where did you read this?

> So is this a bug in 7.0.2 or an implementation change?

Neither. Behavior is intended and did not change.

Jochem

--
Jochem van Dieten
Adobe Community Expert for ColdFusion

[elarin]

It was posted on a ColdFusion consultant's blog. I guess it's incorrect. Thanks for the reply.