Modernize or Die® - CFML News for February 1st, 2022 - Episode 133

Brad and Eric host the this weeks CFML News Podcast. They talked about the partial results of the State of the CF Union Survey. They reminded you of the recent Webinar from Ortus, and upcoming workshop from Adobe. They also discussed a new Meetup Group CF Hawaii User Group started by John Barrett and it's first meetup. Brad also discussed his podcast on CFAlive regarding CommandBox Workflow Magic. They discuss the latest CFCasts content and some upcoming conferences, including some tentative dates for ITB later in the year, and even hints at a new venue option. They spotlight a lot of great blog posts, tweets, videos and podcasts, too many to list, so listen to the show. They announce some jobs from They show off the ForgeBox module of the Week - totp - By Ortus Solutions A CFML Implementation of Time-based One-time Passwords This week's VS Code Tip of the week is Hyper Key - This idea involves mapping Shift-Control-Option-Command to the caps lock key. Using the hyper key opens your keyboard up to a ton of new easily triggered shortcuts. They thanked all their Patreons - they talked a little information about perks for their Patreon supporters, including Annual Memberships with a discount. For the show notes - visit the website Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio
2022-02-01 Weekly News - Episode 133

Watch the video version on YouTube at


Eric Peterson  - Senior Developer for Ortus Solutions
Brad Wood - Software Consultant for Ortus Solutions

Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:
  • Like and subscribe to our videos on YouTube. 
  • Star and Fork our Repos
  • Subscribe to our Podcast on your Podcast Apps and leave us a review
  • Sign up for a free or paid account on CFCasts, which is releasing new content every week
  • Buy Ortus’s Book - 102 ColdBox HMVC Quick Tips and Tricks on GumRoad (

Patreon Support

We have 37 patreons providing 96% of the funding for our Modernize or Die Podcasts via our Patreon site:

News and Events

State of the CF Union 2022 Survey Released

Help us find out the state of the CF Union – what versions of CFML Engine do people use, what frameworks, tools etc.

ICYMI - Ortus Webinar - cbwire + Alpine.js with Grant Copley

In this webinar, Grant, lead developer for cbwire, will showcase how to build modern, reactive CFML apps easily using very little JavaScript.

Hawaii CFUG - Using CFCs in your ColdFusion Applications with John Barrett

Friday, February 25, 2022 - 5:00 PM CT - Central Time (US and Canada)
This will be a talk on using CFCs in your ColdFusion applications. Creating and developing applications using CFCs enables you to separate the code logic from the design and presentation. Utilizing CFCs and creating a clear structured format for your code will help reduce the complexity of logic within your pages and improve the application speed. Having a clearly structured, the well-organized code base will make it easier to develop as an individual and share resources within a team. This is the instant benefit of CFC development.

CommandBox Workflow Magic (modules to speed up CF development), with Brad Wood

Brad Wood talks about “CommandBox Workflow magic (modules to speed up CF development)” in this episode of the CF Alive Podcast, with host Michaela Light.

Adobe Workshops

More Adobe #ColdFusion Workshops announced, lead by Damien Bruyndonckx

2 dates announced:
February 2, 2022
9.00 AM - 4.30 PM CET (Central European Time)
1.30 PM - 9.00 PM IST (Indian Standard Time)

March 09, 2022
9.00 AM - 4.30 PM CET (Central European Time)
1.30 PM - 9.00 PM IST (Indian Standard Time)

Register online at

CFCasts Content Updates

Just Released

Coming soon
  • Into the Box LATAM

Conferences and Training

ICYMI - VueJS Nation Conference

Online Live Event
January 26th & 27th 2022
Register for Free and Watch the VODs

DevNexus 2022

April 12-14, 2022
Atlanta, GA
Brad & Luis will be speaking
Luis - Alpine.js: Declare and React with Simplicity
Brad - What's a Pull Request? (Contributing to Open Source)

Into The Box 2022

Tentative dates - September 27-30

More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.

Blogs, Tweets, and Videos of the Week

Tweet - Brad Wood - X-Forwarded-For in CommandBox vNext
Fair warning-- for a more secure-by-default behavior, CommandBox vNext will no longer trust X-Forwarded-For HTTP headers unless you configure it to. This is to prevent IP-based access control being circumvented. #CFML #ColdFusion #InfoSec #SecureByDefault

Tweet - Zac Spitzer - M1 support in Lucee
Just merged in native M1 support for Macs in Lucee RC1 comes out next week, we've just been battling getting rid of the last vestiges of log4j1 try it out via #Commandbox #lucee #cfml

Supplemental - Dan Abramov - npm audit: Broken by Design
Commentary about the auditing woes

Blog - Ben Nadel - I Always Design The Database Schema First, Then The ColdFusion Code
Throughout my career, I've often heard that it is a best practice to design your "Domain Objects" and your "Business Logic" first and then, eventually, to design a database schema that allows your domain objects to be persisted. I've even seen many ORM (Object-Relational Mapping) systems that will happily churn-out database schemas based solely on your Objects (and their metadata). Personally, I've never done this. In fact, I find this approach to be antagonistic to how my brain operates. When I'm working on a ColdFusion application (or a feature therein), I always start with the database schema first and then layer the ColdFusion application upon it using an iterative, ground-up approach.

Blog - Ben Nadel - Turning Off "InvalidTag" ScriptProtect Safely In ColdFusion 2021
The other day, I wrote an article about dynamically generating <script> tags using Umbrella JS. Historically, writing about the <script> tag has been somewhat challenging - from a technical standpoint - because the ColdFusion server goes out of its way to protect You from persisted Cross-Site Scripting (XSS) attacks. It does this by scanning input scopes (ex, url, form, cgi, cookie) and replacing suspicious tag names (ex, script, object, embed, applet, iframe) with the phrase "InvalidTag". I was able to turn this behavior off using the Application.cfc setting, this.scriptProtect="none". This feels like a scary step, however; so, I wanted to just think out loud about why this is safe to do in my particular context.

Blog - Ben Nadel - Ask Ben: Converting An XML Document Into A Nested ColdFusion Struct
It's been a long, long time since I've done an Ask Ben question; but, I recently received a question about XML document parsing in ColdFusion and I thought this would be a good opportunity to get back into the swing of things. In this post, I'm going to be using a recursive, depth-first traversal algorithm to iterative create a nested structure based on the an XML configuration document.


Several positions available on
Listing over 32 ColdFusion positions from 20 companies across 20 locations in 5 Countries

3 new jobs listed

Full-Time - Software Developer - ColdFusion at Overland Park, KS - United States
Jan 27

Full-Time - Software Developer - Database and ColdFusion Developer at Hobart TAS
Jan 27

Full-Time - Software Developer - Coldfusion Developer at Halifax, ON - United States
Jan 27

Other Job Links


ForgeBox Module of the Week


By Ortus Solutions

A CFML Implementation of Time-based One-time Passwords

Create secrets, authenticator urls, and QR codes for new TOTP tokens.
Generate tokens and verify those tokens using the given secrets.

VS Code Hint Tips and Tricks of the Week

Hyper Key

This idea involves mapping Shift-Control-Option-Command to the caps lock key. Using the hyper key opens your keyboard up to a ton of new easily triggered shortcuts.


Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here

Now offering Annual Memberships, pay for the year and save 10% - great for businesses.
  • Bronze Packages and up, now get a ForgeBox Pro and CFCasts subscriptions as a perk for their Patreon Subscription.
  • All Patreon supporters have a Profile badge on the Community Website
  • All Patreon supporters have their own Private Forum access on the Community Website


John Wilson - Synaptrix
Eric Hoffman
Gary Knight
Mario Rodrigues
Giancarlo Gomez
David Belanger
Jonathan Perret
Jeffry McGee - Sunstar Media6
Dean Maunder
Joseph Lamoree
Don Bellamy
Jan Jannek
Laksma Tirtohadi
Carl Von Stetten
Dan Card
Jeremy Adams
Jordan Clark
Matthew Clemente
Daniel Garcia
Scott Steinbeck - Agri Tracking Systems
Ben Nadel
Mingo Hagen
Brett DeLine
Kai Koenig
Charlie Arehart
Jonas Eriksson
Jason Daiger
Jeff McClain
Shawn Oden
Matthew Darby
Ross Phillips
Edgardo Cabezas
Patrick Flynn
Stephany Monge
Kevin Wright
Steven Klotz

You can see an up to date list of all sponsors on Ortus Solutions' Website 
★ Support this podcast on Patreon ★

Switch to Modernize or Die ® Podcast - SoapBox Edition - Switch to Modernize or Die ® Podcast - Conference Edition

Powered by

Music from this podcast used under Royalty Free license from SoundDotCom and BlueTreeAudio

© 2019 Ortus Solutions