1.
ColdFusion 10
Raymond Camden

2.
This Guy
 Developer Evangelist for Adobe
 Blog: www.raymondcamden.com
 Email: cfjedimaster@adobe.com
 Twitter: cfjedimaster

3.
ZEUS!
So what’s next in Zeus?
aka: ColdFusion 10

4.
ColdFusion 10
 Currently in public beta
 Along with an update to ColdFusion
Builder
 NOT TALKING ABOUT:
 Release Dates (spoiler: not today)
 Prices
 Editions
 All of the above is way over my pay grade.

5.
ALL FEATURES
NOT FINAL!
(but darn close…)

6.
Getting the bits + providing
feedback
 Download
 http://labs.adobe.com/technologies/coldfusion10
 Discuss
 http://forums.adobe.com/community/labs/coldfusion10
 http://forums.adobe.com/community/labs/coldfusion10/col
dfusionbuilder201/
 Denounce! (ok, not really…)
 https://bugbase.adobe.com

7.
ColdFusion 10 Features/Changes
 Server level
 Admin Improvements
 Security out the Ying Yang
 Language Improvements
 Solr Improvements
 Java Integration
 REST
 HTML5
 Web Sockets
 Charting
 Scheduling
 Web Service
 Microsoft Exchange 2010
 Caching Updates

8.
Saying goodbye…
 No more JRun
 No more Verity

9.
Server level
 Tomcat replaces JRun
 Various internal libraries updated (Hibernate, Axis, Solr,
etc)
 Security improved
 Lazy loading for ORM and Flex

10.
Admin Improvements
 Hot Fix Installer
 Template Cache – By Folder
 Clear Query Cache
 File Browser
 IP Addresses for Admin
 Multiple new pages/fields related to other
features

11.
Demos

12.
Security Enhancements
 XSS/CSRF Protection
 Session Improvements
 Hash
 HMAC (Hash-based Message
Authentication Code)
 File Type Mime Checks
 And more…
 Mail CRLF protection, cflogin strengthened,
other services improved

13.
XSS Protection
 Cross-site Scripting
 Open Web Application Security Project's
(OWASP) Enterprise Security API
 New functions:
 encodeForHTML
 encodeForHTMLAttribute
 encodeForJavaScript
 encodeForCSS
 encodeForURL
 canonicalize

14.
Demos
 /demos/security/xss

15.
CSRF Protection
 Cross-Site Request Forgery
 New functions:
 CSRFGenerateToken
 CSRFVerifyToken

16.
Demos
 /demos/security/csrf/csrftoken.cfm

17.
Session Improvements
 httpOnly on by default
 Secure (default is false)
 Domain
 Timeout (days, -1 for killing session when
browser closes)
 sessionInvalidate and sessionRotate

18.
Example
this.sessioncookie.httponly="true";
this.sessioncookie.secure="true";
this.sessioncookie.domain="value";
this.sessioncookie.timeout="value";

19.
Hash
 Hash can now be told to iterate N times:
hash(input, "sha", 4)

20.
Demo
 /demos/security/hash.cfm

21.
Mime Type Checking
 cffile upload
 getFileMimeType

22.
Demos
 /demos/security/fileupload.cfm and
filemimetype.cfm

23.
Language Improvements

24.
In no particular order…
 Cookie via Script
 For-in for Queries
 Append to file with content
 Call Stack
 Application Metadata
 Disk Space/CPU
 App-specific VFS
 CFC implicit constructors, method chaining, implicit notation
 XPath2
 VFS supports app-specific, Zip, HTTP, FTP
 dateTimeFormat
 cfinclude runonce
 Application.cfc - onAbort
 cfloop/group
 cfpop/secure
 JSON support for implicit CFML variables
 queryAddRow/queryNew easier!
 Oh, and….

25.
CLOSURES!

26.
Demos
 /demos/lang

27.
CFC Syntax Sugar…
 Implicit constructor
 Method chaining
 Implicit notation (setting)
 this.invokeImplicitAccessor = true;

28.
Demo
 /demos/cfcs

29.
Solr
 Dynamic custom fields (as many as you
want, even up to 11!)
 ORM based search
 Data Import Handler (no more cfquery)
 Other misc things… (more languages for
example)

30.
Demos
 Custom Fields demo
 ORM Search demo

31.
Java Integration
 Ability to load Java libraries
 JavaLoader RIP
 Java access to CFC files:
 CFCProxy myCFC = new CFCProxy(cfcPath,
true);

32.
Demo
 /demos/java

33.
REST
RESTful web services are built to work best on the
Web. Representational State Transfer (REST) is an
architectural style that specifies constraints, such as the
uniform interface, that if applied to a web service induce
desirable properties, such as performance, scalability,
and modifiability, that enable services to work best on
the Web. In the REST architectural style, data and
functionality are considered resources and are accessed
using Uniform Resource Identifiers (URIs), typically
links on the Web. The resources are acted upon by using
a set of simple, well-defined operations. The REST
architectural style constrains an architecture to a
client/server architecture and is designed to use a
stateless communication protocol, typically HTTP. In the
REST architecture style, clients and servers exchange
representations of resources by using a standardized
interface and protocol.
From: http://download.oracle.com/javaee/6/tutorial/doc/gijqy.html

34.
REST
 Who cares what it is – we make it easy!
 (Btw – I'm kidding. Mostly.)
 Extensions to component, function,
argument, application.cfc, and the Admin

35.
Demos
 /demos/rest

36.
HTML5
 CFMAP
 CFMEDIAPLAYER
 cfinput won't barf on new items (like
type=range)

37.
Demos
 /demos/cfmap
 /demos/testinput.cfm
 Oh and the video one too…

38.
Web Sockets
 Bidirectional communication
 One client to all the rest
 Server to all clients
 Front end support via <cfwebsocket>
 Back end support for defining listeners

39.
Demo

40.
Charting
 All new charting engine
 Styles are JSON objects
 Deeper configuration via JSON
 Lots of new features

41.
Demo

42.
And more…

43.
What next?
 You downloaded it already, right? I mean, it's a virtual
presentation, you don’t have to pretend to pay attention,
so I know you downloaded the bits while I spoke along
with doing some mining in World of Warcraft and a bit of
client work. Get to it!
 Lots of blog entries: www.coldfusionbloggers.org

44.
Questions?