2021-11-16 Weekly News - Episode 126

Watch the video version on YouTube at https://youtu.be/83taKaR58xs

Hosts:
 
Eric Peterson - Senior Developer for Ortus Solutions


Thanks to our Sponsor - Ortus Solutions

The makers of ColdBox, CommandBox, ForgeBox, TestBox and almost every other Box out there. 
A few ways  to say thanks back to Ortus Solutions:

Patreon Support

We have 38 patreons providing 98% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.



News and Events



Ortus Webinar for November - Javier Quintero - FORGEBOX Business Plan: Introducing Organizations and Teams

November 19th at 11:00 AM Central Time (US and Canada)
In this webinar, Javier Quintero, lead developer of FORGEBOX, will present the new features and the improved UI that is now available on FORGEBOX 6. Moreover, he’ll explore in depth the Business Plan that is directed towards organizations and teams so they can collaborate and support their software building needs. He will show us how to create a new organization, how you can add members to it with specific roles, and how you can control teams, members, packages and publish access.
with Javier Quintero
https://us02web.zoom.us/meeting/register/tZclfuGopjkiG9TIMoC93YbKIcLM1ok_KKlw


ICYMI - Mid Michigan CFUG Meeting - Using AI and machine learning along with ColdFusion to build a smarter call center with Nick Kwiatkowski

Tuesday 11/9/21 at 7 pm eastern
Using AI and machine learning along with ColdFusion to build a smarter call center at the next Mid-Michigan CFUG meeting Tuesday 11/9/21 at 7 pm eastern. 
Michigan State University’s, Nick Kwiatkowski, will be showing how to create voice and text-based chat bots that you can deploy to your contact centers (and help desks!) to help automate frequently asked questions.
Recording - check Facebook group


ICYMI - Online CF Meetup - "Avoiding Server-Side Request Forgery (SSRF) Vulns in CFML", with Brian Reilly
Thursday, November 11, 2021 - 9:00 AM to 10:00 AM PST
Server-Side Request Forgery (SSRF) vulnerabilities allow an attacker to make arbitrary web requests (and in some cases, other protocols too) from the application environment. Exploiting these flaws can lead to leaking sensitive data, accessing internal resources, and under certain circumstances, remote command execution.
Several ColdFusion/CFML tags and functions can process URLs as file path arguments -- including some tags and and functions that you might not expect. If these tags and functions process unvalidated user-controlled input, this can lead to SSRF vulnerabilities in your applications. In addition to providing a list of affected tags and functions, I'll cover some approaches for identifying and remediating vulnerable code. My goal for this talk is to raise awareness about what may be a security blindspot for some ColdFusion/CFML developers.
https://www.meetup.com/coldfusionmeetup/events/281850930/
Recording: https://www.youtube.com/watch?v=-wu6cRZcRx0



CFCasts Content Updates

https://www.cfcasts.com

Just Released

A new series of ForgeBox coming very soon

Send your suggestions at https://cfcasts.com/support



Conferences and Training


Deploy by Digital Ocean - THIS WEEK

THE VIRTUAL CONFERENCE FOR GLOBAL DEVELOPMENT TEAMS
November 16-17, 2021
https://deploy.digitalocean.com/home


AWS re:Invent

NOV. 29 – DEC. 3, 2021 | LAS VEGAS, NV
CELEBRATING 10 YEARS OF RE:INVENT
Virtual: Free
In Person: $1799
https://reinvent.awsevents.com/


Postgres Build

Online - Free
Nov 30-Dec 1 2021
https://www.postgresbuild.com/


ITB Latam 2021

December 2-3, 2021
Into the Box LATAM is back and better than ever! Our virtual conference will include speakers from El Salvador and all over the world, who'll present on the latest web and mobile technologies in Latin America.
Registration is completely free so don't miss out!
ITB Latam Schedule Posted
https://latam.intothebox.org/


Adobe ColdFusion Summit 2021

December 7th and 8th - Virtual
Agenda is out!!!
@Adobe @coldfusion #CFSummit2021 keynote we will be featuring @ashleymcnamara! Her talk will focus on the history & future of DevRel how we got here & where we're going.
2 tracks - 1 all CFML - the other a mix of CFML and semi-related topics
Register for Free - https://cfsummit.vconfex.com/site/adobe-cold-fusion-summit-2021/1290
Blog - https://coldfusion.adobe.com/2021/09/adobe-coldfusion-summit-2021-registrations-open/


jConf.dev

Now a free virtual event
December 9th starting at 8:30 am CDT/2:30 pm UTC.
https://2021.jconf.dev/?mc_cid=b62adc151d&mc_eid=8293d6fdb0


VueJS Nation Conference

Online Live Event
January 26th & 27th 2022
Register for Free
Call for Speakers is open until Dec 31 2021
https://vuejsnation.com/


More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/



Blogs, Tweets and Videos of the Week


Blog - Charlie Arehart - Should you “bother” to file bug reports at tracker.adobe.com? Yes you should
I just wanted to offer a quick plug to get folks to please consider filing bugs (and feature requests) at the Adobe site for tracking them, https://tracker.adobe.com. I’ve blogged before about how it can be used for more than most may realize. What I want to share here is that it’s not a “waste of time to bother”.
Some may wonder first, “why is is worth pointing out Tracker? Doesn’t everyone know about it?” The answer to the second question is “no”: many do NOT know about it. But the more important question may be the first, and it’s the real reason I’m writing this post.
https://coldfusion.adobe.com/2021/11/should-you-bother-to-file-bug-reports/


Blog - Ben Nadel - Phill Nacelli's SQL Tip Is Making My CFQuery Upgrades In Adobe ColdFusion 2021 Easy
As I've started to modernize my blogging platform for Adobe ColdFusion 2021, one of the things that I was dreading was the lack of Lucee CFML's Tag Islands. Tag Islands have really been a game changer for me, allowing me to seamlessly execute the CFQuery tag inside CFScript. I was afraid that I was going to have to keep using Tag-based syntax for my Gateway / Data Access components. But then, I remembered a hot tip from Phill Nacelli on giving dynamic SQL statements a consistent structure. It turns out, Phill's technique is making it bearable for me to use the queryExecute() Function in lieu of the CFQuery inside a Tag Island.
https://www.bennadel.com/blog/4153-phill-nacellis-sql-tip-is-making-my-cfquery-upgrades-in-adobe-coldfusion-2021-easy.htm


Blog - Ben Nadel - A Query Object Maintains Its CurrentRow When Passed Out-Of-Context In Adobe ColdFusion 2021
As I'm attempting to modernize my blogging platform for Adobe ColdFusion 2021, I'm moving a lot of my old-school, inline CFQuery tags into various "Service" and "Data Access" ColdFusion components where they can be reused across multiple templates. And, as much as I love the ColdFusion Query object, my "service boundaries" deals with Arrays and Structs, not queries. As such, I have code that deals with mapping queries onto other normalized data structures. While writing this code, I was tickled by the fact that the Query object maintains its .currentRow property even when passed out-of-context. This .currentRow can then be used a default argument value in Function signatures. This is a really old behavior of ColdFusion; but, I thought it would be fun to demonstrate since it may not be a feature people consider very often.
https://www.bennadel.com/blog/4152-a-query-object-maintains-its-currentrow-when-passed-out-of-context-in-adobe-coldfusion-2021.htm



CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 233 ColdFusion positions from 103 companies across 123 locations in 5 Countries.

6 new jobs listed

Full-Time - Senior Coldfusion Developer |LATAM| at Colon, PA - United States
Posted Nov 15
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Senior-Coldfusion-Developer-LATAM-at-Colon-PA/11381

Full-Time - ColdFusion Developer | 4 to 6 years | Pune at Pune, Maharash.. - India
Posted Nov 12
https://www.getcfmljobs.com/jobs/index.cfm/india/ColdFusion-Developer-4-to-6-years-Pune-at-Pune-Maharashtra/11380

Full-Time - Senior Coldfusion Developer (RQ02208) at Toronto, ON - Canada
Posted Nov 11
https://www.getcfmljobs.com/jobs/index.cfm/canada/Senior-Coldfusion-Developer-RQ02208-at-Toronto-ON/11379

Full-Time - Programmer (Coldfusion Java - Remote) at United States - United States
Posted Nov 11
https://www.getcfmljobs.com/jobs/index.cfm/united-states/Programmer-Coldfusion-Java-Remote-at-United-States/11378

Full-Time - Front End / Coldfusion Developer - Salford Quays + WFH at Sa.. - United Kingdom
Posted Nov 10
https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Front-End-Coldfusion-Developer-Salford-Quays-WFH-at-Salford/11377

Full-Time - ColdFusion Jr. Web Developer at Pune, Maharashtra - India
Posted Nov 09
https://www.getcfmljobs.com/jobs/index.cfm/india/ColdFusion-Jr-Web-Developer-at-Pune-Maharashtra/11376



ForgeBox Module of the Week

Globber

By Brad Wood and Ortus Solutions

A utility module to match file system path patterns (globbing) in a similar manner as Unix file systems or .gitignore syntax.
box install globber

Last Update: August 10, 2021 - 3.0.7

https://forgebox.io/view/globber



VS Code Hint Tips and Tricks of the Week

Encode Decode

The Encode/Decode (ecdc) extension allows you to quickly convert one or more selections of text to and from various formats

The extension provides a single command to the command palette. To active the command simply launch the command palette (Shift-CMD-P on OSX or Shift-Ctrl-P on Windows and Linux), then just type Encode/Decode: Convert Selection, then a menu of possible conversions will be displayed. Alternatively you can use the keyboard bindings CMD-ALT-C and CTRL-ALT-C for Mac & PC respectively.

https://marketplace.visualstudio.com/items?itemName=mitchdenny.ecdc



Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

Now offering Annual Memberships, pay for the year and save 10% - great for businesses.

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors