
Adobe documentation - Confidential
By setting to -1 ColdFusion will set
the session cookie as a browser
session cookies, which is valid as
long as the users browser window is
Session cookies should always be
marked as HTTPOnly to prevent
JavaScript or other client side
technologies from accessing their
values (on supported clients).
require SSL.
A client will only transmit a secure
cookie over a secured connection
ColdFusion internal
cookies using
ColdFusion
Secure Profile
require SSL.
You can use this feature to prevent
a developer from overriding your
global session cookie security
settings.
Server Settings > Mappings
Remove any mappings your applications do not require, such as /gateway
Server Settings > Mail
connections to mail
supported
Consider enabling SSL or TLS
encryption for sending mail with
connection to mail
supported
Consider enabling SSL or TLS
encryption for sending mail with
Server Settings > WebSocket
Adobe documentation - Confidential
Komentáře k této Příručce