New Version of ColdFusion Is Zeus

ColdFusion Zeus is the code name for the next version of ColdFusion but not yet called CF10. The document mentioned below does not specify all that is new/updated in Zeus rather mentions only the things that are publicly announced by Adobe regarding Zeus. CF typically tries to remain backwardly compatible. So, in Zeus Tomcat will be replacing JRun as underlying Java container which provides us with the following benefits: • Much more modern container. More robust, lightweight, faster. • Many benefits, extended features of Tomcat could be leveraged • Multiserver form of deployment still supported Verity will finally be removed (in favor of Solr, added in CF9) and the document and also removed are the document limits Verity imposed. ColdFusion Zeus: NEW ENHANCEMENTS NEW ADMIN ENHANCEMENTS • Automated Hotfix Mechanism • View available updates in the administrator / notification • Download updates • One-click install, even to multiple instances • Supports normal and security hotfixes • Also Admin API and Server Manager Updates to support this • Installer for 8, 8.0.1, 9, 9.0.1 (w/o notification) • Clear template cache for given folder • Clear query cache • Restricting Admin Access by IP Address • CF Admin secure by default in various ways NEW SECURITY ENHANCEMENTS • XSS Protection (cross-site scripting: putting code on page via input fields) • New functions to check and clean input strings (HTML, CSS, JavaScript, and URL) • Based on ESAPI from OWASP • CSRF Protection (cross-site request forgery: causing unexpected authorized acts) • New functions to generate, verify tokens • Session Improvements • New control over session cookie properties (timeout, security features) • New sessioninvalidate () and sessionrotate () functions • Verification of Mime type on CFFILE uploads (optional strict attribute) • Also new fileGetMimeType to check type for given file or object • Also: CRLF ("http response splitting") protection, Hash/HMAC support, cflogin strengthened, other Services improved, protections tightened • Dedicated Security Czar NEW SCHEDULED TASK ENHANCEMENTS • Powered by Quartz: http://www.quartz-scheduler.org/ • Supports task chaining (task interdependencies) • Attaching listeners to tasks • Setting priorities for tasks • Cron-style format for scheduling • Ability to group tasks (assign to a group name) for management of grouped tasks • Better error handling (refire, pause, invoke exception handler) ColdFusion Zeus: UPDATES FROM EARLIER VERSION • CF Admin Java applet for file/folder choosing • Replaced with jQuery control • Application-specific in-memory file system (VFS) • CF9 introduced, but was system-wide (shared by all) • Can now be set to per-application (in admin or in app), and can set limits • Exchange 2010 support, including EWS (web svcs) • Also folder operations, user scheduling, conversation-based ops • Web Services now Axis 2 (adds REST, WDSL 2.0 and much more) • Create and publish REST-based services (using JSON, XML) • SOAP 2 can be specified at component, application, or server level • Backwards-compatible (always a goal for CF)

http://cf.etisbew.com