2022-11-08 Weekly News - Episode 171

Watch the video version on YouTube at https://youtu.be/teJ4cpNvYOY
 
Hosts: 

Thanks to our Sponsor - Ortus Solutions
The makers of ColdBox, CommandBox, ForgeBox, TestBox and all your favorite box-es out there. 
A few ways  to say thanks back to Ortus Solutions:

Patreon Support
 
Goal 1 - We have 42 patreons providing 100% of the funding for our Modernize or Die Podcasts via our Patreon site: https://www.patreon.com/ortussolutions.
Goal 2 - We are 38% of the way to fully fund the hosting of ForgeBox.io

Patreon Sponsored Job Announcement - Tomorrows Guides

Tomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector.

Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well.

We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution.

Current Roles in detail

All roles: https://www.tomorrows.co.uk/jobs.cfm

Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -
https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/
-  Minimum three years’ experience with ColdFusion
-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019
-  Familiarity with Git
-  Flexible skillset covering a wide range of development

Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k -
https://app.occupop.com/shared/job/automation-test-engineer-a6545/
-  Minimum three years experience with automated testing
-  Experience with automated testing tools such as selenium
-  Experience with API test tools such as Postman/Fiddler etc


Benefits of both roles:
-  £4,000 per annum discretionary company bonus scheme
-  25 days annual leave + bank holidays
-  6% employer pension contribution
-  Access to free perks and discounts through Perkbox
-  Long Service Awards
-  Cycle to Work Scheme
-   Company and Team nights out


News and Announcements

OpenSSL Vulnerabilities
Pete has had a several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.
https://www.petefreitag.com/item/1000.cfm


ColdBox Master Class - Completely Free until the end of the Year!
Want to learn about modern web apps in ColdFusion (CFML)? We have our ColdBox Master Class for FREE until the end of the year!  A gift to the community, so we can all build amazing apps together! Watch all the videos!  Binge Coding Anyone? Enjoy!
https://www.cfcasts.com/series/cb-master-class?utm_source=podcast&utm_medium=PODCAST&utm_campaign=LM-PODCAST


Wirebox Delegates
WireBox supports the concept of object delegation in a simple expressive DSL.  In object-oriented programming, delegation refers to the evaluating a member (property or method) of one object (the receiver) to the context of another object (the sender).  Basically a way to proxy calls from one object to the other and avoid the overuse of inheritance, avoid runtime mixins or traits.  WireBox provides a set of rules for method lookup and method dispatching that will allow you to provide delegation easily in your CFML applications.
https://ortussolutions.notion.site/WireBox-Delegators-8608752a03d345ad80f8c1a1b441a428


CommandBox vNext supports providing SSL certs in PFX format
CommandBox vNext finally supports providing SSL certs in PFX format, which is a single file containing the public and private key as opposed to needing those in two separate files.
https://ortussolutions.atlassian.net/browse/COMMANDBOX-1499


New Releases and Updates

Lucee released 5.3.9.166 Stable
This a minor bug fix release, which addresses a few bugs listed below, mainly relating to concurrency or errors under heavy load.
Anyone running 5.3.9.160 is encouraged to update to this release.
https://dev.lucee.org/t/lucee-5-3-9-166-stable-release/11319


Restoring the CF Admin logviewer removed in Oct 2022 CF updates, at your own risk
As of the Oct 2022 CF updates (CF2021 update 5 and CF2018 update 15), Adobe has chosen to remove the CF Admin feature to view, search, download, and delete CF logs, due to asserted (but as-yet undocumented) security concerns.
What if you want it back? In this post, I explain what changed, why, and how to get the functionality back--albeit at your own risk. For more, read on.
https://www.carehart.org/blog/2022/11/3/restoring_admin_logviewer



ICYMI - CBWIRE v2.1 Released

CBWIRE, our ColdBox module that makes building reactive, modern CFML apps delightfully easy, just dropped its 2.1 release. This release contains mostly bug fixes and also the ability to create your UI templates directly within your CBWIRE component using the onRender() method.
We've added an example of using onRender() to our ever growing CBWIRE-Examples Repo that you can run on your machine locally. https://github.com/grantcopley/cbwire-examples

https://www.ortussolutions.com/blog/cbwire-2-1-released


Webinar / Meetups and Workshops

Ortus Event Calendar for Google

https://calendar.google.com/calendar/u/0?cid=Y181NjJhMWVmNjFjNGIxZTJlNmQ4OGVkNzg0NTcyOGQ1Njg5N2RkNGJiNjhjMTQwZjc3Mzc2ODk1MmIyOTQyMWVkQGdyb3VwLmNhbGVuZGFyLmdvb2dsZS5jb20

Embeddable Link: https://calendar.google.com/calendar/embed?src=c_562a1ef61c4b1e2e6d88ed7845728d56897dd4bb68c140f773768952b29421ed%40group.calendar.google.com&ctz=America%2FLos_Angeles

Ortus Software Craftsmanship Book Club - Patreon Only

Friday, November 11th at 2pm CDT - 2nd Friday of the Month
Clean Code: A Handbook of Agile Software Craftsmanship by Robert Martin (Uncle Bob)

We will meet monthly on Zoom, and we’ll use the Ortus Community Forum for Patreon to discuss the book.
https://community.ortussolutions.com/t/ortus-software-craftsmanship-book-club-clean-code/9432

We will also be rewriting the code from Java to CFML as we proceed through the book.
The final result will be here https://github.com/gpickin/clean-code-book-cfml-examples

You can get a copy of the book at one of the below links, or your favorite bookstore
https://amzn.to/3TIrmKm or https://www.audible.com/pd/Clean-Code-Audiobook/B08X7KL3TF?action_code=ASSGB149080119000H&share_location=pdp&shareTest=TestShare


Ortus Webinar - Daniel Garcia - API Testing with PostMan

Friday, November 18th  at 11am CDT - 3rd Friday of the Month
https://us06web.zoom.us/meeting/register/tZYqc-uuqzMqGtAO7tQ6qCsN8bR0LyBf8DNP


CF Hawaii Meetup - Managing All your ColdFusion Servers with CommandBox with Brad Wood

CommandBox is a standalone, native tool for Windows, Mac, and Linux that will provide you with a Command Line Interface (CLI) for developer productivity, tool interaction, package management, embedded CFML server, application scaffolding, and sweet ASCII art. It seamlessly integrates to work with any of Ortus Solutions *Box products, but it is also open for extensibility for any ColdFusion (CFML) project as it is written in ColdFusion (CFML) using our concepts of CommandBox Commands.

CommandBox also functions as a package management tool which integrates seamlessly with ForgeBox. During this meeting Brad will give you an introduction to CommandBox to mange your ColdFusion Server as well as CF Config to Mange the CF Admin.

https://www.meetup.com/hawaii-coldfusion-meetup-group/events/289489609/


CF Summit Online

Adobe announced today that the “ColdFusion Summit Online” will begin soon, where they will be having presenters offer their sessions again from the CF Summit last month, to be live-streamed and recorded since that couldn’t be done in Vegas.


https://coldfusion.adobe.com/2022/11/coldfusion-summit-online/

All the webinars, all the speakers from Adobe ColdFusion Summit 2022 – brought right to your screen. All sessions will soon be streamed online, for your convenience. Stay tuned for more!

Charlie Arehart - “How the Adobe CF Docker Images Have Evolved”
Wednesday November 16 at 12pm – 1pm EST.
Since Adobe’s original 2018 release of Docker images for CF (initially for cf2018 and cf2016), the configurability features built into them have improved in significant ways, especially with cf2021, which is much smaller, faster, and whose admin settings can be configured via json. In this talk, veteran CF consultant Charlie Arehart will review and demonstrate those feature changes for the CF images, as well as the images for the CF Performance Monitoring Toolkit (PMT) and the CF Enterprise API Manager–all available at Dockerhub since 2021.
Register: https://how-the-cf-docker-images-evolved.meetus.adobeevents.com/


Brad Wood - Message Queues with RabbitMQ
1pm to 2pm ET on Nov 30
Get to know about RabbitMQ – a tool used for worker queues, topic distribution, synch RPC invocations, and even web socket pushes to your web app in this session. Using the RabbitSDK for ColdFusion, you can get started today with queues and bring your apps to the next level. Stop thinking about API calls and start thinking about sending messages, thanks to this popular and robust queue.



Ortus Office Hours

A new  initiative where some Ortusians will be on a Zoom call and answer whatever questions people have. We are going to start less structured and see how things develop.

December 2nd at 11am CDT - 1st Friday of the Month
Daniel Garcia will host a variety of Ortus people
Office Hours questions & requests form available
Register in advance for this meeting:
https://us02web.zoom.us/meeting/register/tZYvcO-hrz8iHNS0C3o0aw2x3JMtmBrKwzfA


ColdFusion Security Training - Writing Secure CFML with Pete Freitag from Foundeo
When: Tuesday December 13, 2022 @ 11am-2pm & Wednesday December 14 @ 11am-2pm
(Eastern Standard Time, UTC -5) - 6 hours in total.

A hands-on CFML / ColdFusion Security Training class for developers. Learn how to identify and fix security vulnerabilities in your ColdFusion / CFML applications.
The class will be recorded, so if you cannot attend it fully online you will have access to a recording.

Where: Online / Web Conference
Who: Taught by Pete Freitag
Cost: $999/student $899/student (Early Bird Discount)
Register: https://foundeo.com/consulting/coldfusion/security-training/


Adobe Workshops & Webinars

Join the Adobe ColdFusion Workshop to learn how you and your agency can leverage ColdFusion to create amazing web content. This one-day training will cover all facets of Adobe ColdFusion that developers need to build applications that can run across multiple cloud providers or on-premise.

https://coldfusion.adobe.com/2022/10/upcoming-adobe-webinar-on-preview-of-cf2023-date-and-title-change/ 


WEBINAR - WEDNESDAY, NOVEMBER 23, 2022 - New Date - New Name
10:00 AM PST
The Road to Fortuna
Mark Takata
https://winter-special-preview-of-cf2023.meetus.adobeevents.com/


WEBINAR - THURSDAY, DECEMBER 22, 2022
10:00 AM PST
Building Native Mobile Applications with Adobe ColdFusion & Monaco.io
Mark Takata
https://building-native-mobile-apps-with-cf-monaco-io.meetus.adobeevents.com/

FREE :)
Full list - https://meetus.adobeevents.com/coldfusion/


CFCasts Content Updates
https://www.cfcasts.com

Just Released

Conferences and Training

Deploy from Digital Ocean
November 15-16, 2022
The virtual conference for global builders
Subtract Complexity,
Add Developer Happiness
Join us on the mission to simplify the developer experience.
https://deploy.digitalocean.com/


Into the Box Latam 2022
Dec 7th, 2022 - 8am - 5pm
2 tracks - 1 set of sessions, 1 set of deep dive workshop sessions
Pricing $9-$29 USD
Location: Hyatt Centric
Las Cascadas Shopping Center,
Merliot, La Libertad 99999
El Salvador
https://latam.intothebox.org/


VUEJS AMSTERDAM 2023
9-10 February 2023, Theater Amsterdam
World's Most Special and Largest Vue Conference
CALL FOR PAPERS AND BLIND TICKETS AVAILABLE NOW!
Call for Papers: https://forms.gle/GopxfjYHfpE8fKa57
Blind Tickets: https://eventix.shop/abzrx3b5
https://vuejs.amsterdam/



Dev Nexus
April 4-6th in Altanta
EARLY BIRD CONFERENCE PASS - APRIL 5-6 (AVAILABLE UNTIL NOVEMBER 20)
(Approx 40% off)
If you are planning to speak, please submit often and early. The CALL FOR PAPERS is open until November 15
WORKSHOPS WILL BE ON JAVA, JAVA SECURITY, SOFTWARE DESIGN, AGILE, DEVOPS, KUBERNETES, MICROSERVICES, SPRING ETC. SIGN UP NOW, AND YOU WILL BE ABLE TO CHOOSE A WORKSHOP, LATER ON,
https://devnexus.com/


VueJS Live
MAY 5 & 8, 2023
ONLINE + LONDON, UK

CODE / CREATE / COMMUNICATE

35 SPEAKERS, 10 WORKSHOPS
10000+ JOINING ONLINE GLOBALLY
300 LUCKIES MEETING IN LONDON

Get Early Bird Tickets: https://ti.to/gitnation/vuejs-london-2022
Watch 2021 Recordings: https://portal.gitnation.org/events/vuejs-london-2021

https://vuejslive.com/


Into the Box 2023 - 10th Edition
May 17, 18, and 19th, 2022.
Middle of May - start planning.
Final dates will be released as soon as the hotel confirms availability.
Call for Speakers - this week


CFCamp
No CFCAMP 2022, we're trying again for summer 2023
TLDR is that it's just too hard and there's too much uncertainty right now.


More conferences

Need more conferences, this site has a huge list of conferences for almost any language/community.
https://confs.tech/



Blogs, Tweets, and Videos of the Week

11/8/22 - Tweet - Luis Majano - Ortus Solutions WireBox 7 - Delegates
The power of the new WireBox 7 Delegates! Traits for #coldfusion #cfml are here! Composable reusability to modernize your CFCs! https://ortussolutions.notion.site/WireBox-Delegators-8608752a03d345ad80f8c1a1b441a428   #modernizeOrDie #wirebox #coldbox
https://twitter.com/lmajano/status/1589934986991378433


11/8/22 - Tweet - Luis Majano - CbSecurity V3 is coming - including new Security Firewall Vizualizer
The new ColdBox Security v3 is almost done! Brand new Security Firewall visualizer, basic auth, included user storage, rule simulator, ColdBox 7 delegates, jwt, new firewall blocks, reporting, fluent configuration and so much more! #secureAllThings #coldbox #modernizeOrDie
https://twitter.com/lmajano/status/1589931501411598338
https://twitter.com/lmajano

11/7/22 - Ortus Solutions - The holiday season is almost here and we want to give you an early present!
For the first time ever, enjoy our "ColdBox Master Class" for FREE until Dec 31st, and start building secure and modern CFML web applications with up-to-date tools and methodologies that will help you increase your development productivity!
Whether you are a ColdBox master or a beginner, this course will give you the tools and guidance you need to learn everything about this open-source modular web application framework from start to finish.
Let's get started, modernize your web development projects today and optimize your services by getting the best out of our ColdBox MVC framework.
https://www.ortussolutions.com/blog/become-a-coldbox-master-for-free


11/7/22 - Blog - Ben Nadel - Proxying Gravatar Images For Better Avatar Caching In ColdFusion
When readers leave a comment on this blog, I render an avatar next to their authorship information. This avatar is served from Gravatar, which is (probably) the most popular avatar system on the web (brought to us by the same people who built WordPress). Unfortunately, serving avatars from Gravatar was hurting my Chrome LightHouse scores due to Gravatar's very short caching controls (5-mins). To help improve my LightHouse score, I'm starting to proxy the Gravatar images on my ColdFusion server, applying a custom Cache-Control HTTP header.
https://www.bennadel.com/blog/4351-proxying-gravatar-images-for-better-avatar-caching-in-coldfusion.htm


11/5/22 - Linked In Post - Luis Majano - J on the Beach Meetup in Malaga Spain
We had a great time!!! Our European Grass Roots events have started!! #cfml #coldfusion #coldbox #ortus

Yesterday we had a great meetup led by Jorge Reyes Bendeck from Ortus Solutions, Corp learning about all the different licenses available for #OpenSource software.
https://www.linkedin.com/feed/update/urn:li:share:6994607593453162496/


11/5/22 - Blog - Charlie Arehart - ColdFusion Portal - Enabling CF to switch to using Java’s regex engine
If you may ever encounter problems trying to use regular expressions in CFML (which are actually PERL regex’s), did you know that you can tell CF to use Java regex’s instead? This has been possible since 2019, but you could have missed when the change was introduced via CF2018 update 5 in Sep 2019–and of course the option is also built into CF 2021.
This is one of those settings which can be enabled/controlled at either:
the server level: via the CF Admin “Settings” page, and its “Use Java as Regex Engine” option
or the application level: via the this.useJavaAsRegexEngine in application.cfc (or an attribute of the same name in cfapplication, if using application.cfm)
https://coldfusion.adobe.com/2022/11/switching-cf-to-use-java-regex-engine/

 
11/5/22 - Blog - Charlie Arehart - ColdFusion Portal - Come learn “How the Adobe CF Docker Images Have Evolved”, launching CF Summit online
The first session for the Adobe ColdFusion Summit Online has been announced. I had reported here last week that Adobe was going to start having all the speakers from Adobe’s CF Summit (in Vegas last month) offer their talks online, to be live-streamed and recorded. Well, it looks like I’m the lead-off batter.
https://coldfusion.adobe.com/2022/11/come-learn-how-adobe-cf-docker-images-have-evolved/


11/4/22 - Blog - Nolan Erck - Free ColdBox Training For The Rest Of 2022
CFML developers that still say "I don't know how to use ColdBox", your excuses are now officially invalid. ;)
The ColdBox Master Class video training series that I produced for Ortus Solutions is FREE for the rest of the year!
https://southofshasta.com/blog/free-coldbox-training-for-the-rest-of-2022/


11/4/22 - Blog - Pete Freitag - OpenSSL and ColdFusion / Lucee / Tomcat
Pete have had a several people asking me about the openssl vulnerabilities that were patched this week: CVE-2022-3602 and CVE-2022-3786 aka Spooky SSL.
https://www.petefreitag.com/item/1000.cfm


11/4/22 - Tweet - Pete Miller - Lost Respect
I lost a lot of respect in a past job sticking with #CFML even to point I was moved sideways and new project manager came in with #PHP for new project. I left and 7 years later the #CFML runs their business and the #PHP project is dead and buried.
https://twitter.com/millerpete/status/1588660303986036738
https://twitter.com/millerpete


11/4/22 - Tweet - Brad Wood - Ortus - Microsoft 365’s removal of plain text passwords
If anyone is caught out by Microsoft 365's removal of plain text passwords to check Exchange mail, I've recently setup an Oauth flow using the GraphAPI for a client and posted some example code here in the Lucee forum to help you out:
https://dev.lucee.org/t/check-email-on-o365-with-oauth/11389/5?u=bdw429s


11/4/22 - Blog - Zac Spitzer - Lucee - Lucee released 5.3.9.166 Stable
This a minor bug fix release, which addresses a few bugs listed below, mainly relating to concurrency or errors under heavy load.
Anyone running 5.3.9.160 is encouraged to update to this release.
https://dev.lucee.org/t/lucee-5-3-9-166-stable-release/11319


11/3/22 - Blog - Charlie Arehart - Restoring the CF Admin logviewer removed in Oct 2022 CF updates, at your own risk
As of the Oct 2022 CF updates (CF2021 update 5 and CF2018 update 15), Adobe has chosen to remove the CF Admin feature to view, search, download, and delete CF logs, due to asserted (but as-yet undocumented) security concerns.
What if you want it back? In this post, I explain what changed, why, and how to get the functionality back--albeit at your own risk. For more, read on.
https://www.carehart.org/blog/2022/11/3/restoring_admin_logviewer


11/3/22 - Podcast - Michela Light - CFAlive - 123 State of CF Union Survey Analysis (part 2) with Gavin Pickin
Gavin Pickin talks about “State of CF Union Survey Analysis (part 2)” in this episode of ColdFusion Alive Podcast with host Michaela Light.
“we're going to be doing our second part on the state of the ColdFusion survey results. And we've got some very interesting data that we found we've done Gavin put together some really cool graphs show it so if you're watching on video, be able to see those if you're not on video, you can go to the show notes page on teratech.com to have a look at the graphs when we get to those.”
https://teratech.com/podcast/state-cf-union-survey-analysis-part-2-with-gavin-pickin/

CFML Jobs

Several positions available on https://www.getcfmljobs.com/
Listing over 145 ColdFusion positions from 80 companies across 66 locations in 5 Countries.

2 new jobs listed this week


Full-Time - Senior ColdFusion Developer at London - United Kingdom
Nov 03
https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Senior-ColdFusion-Developer-at-London/11532

Full-Time - Coldfusion Developer at London - United Kingdom
Nov 03
https://www.getcfmljobs.com/jobs/index.cfm/united-kingdom/Coldfusion-Developer-at-London/11531


Patreon Sponsored Job Announcement - Tomorrows Guides

Tomorrows Guides is a fast paced leader in the UK care sector, catering for care seekers across three areas: Care Homes, Nurseries and Home Care. We are often called the Trip Advisor of the care sector.

Our Product team consists of over 20 individuals across the UK working remotely to expand and improve our offering with regular expansion in teams year on year. We work with both Coldfuson 2021 and Node.js/React in the Azure cloud, while also using both MSSQL and MongoDB databases. Currently we are looking for Senior Coldfusion developers and Automation Testers with training paths to node.js available as well.

We offer a wide variety of perks from our company wide £4k bonus scheme, and quarterly nights out with the whole company and the Product team to a 6% company pension contribution.

Current Roles in detail

All roles: https://www.tomorrows.co.uk/jobs.cfm

Senior Cf Developer – UK Only | Remote | Permanent | Circa £60k -  https://app.occupop.com/shared/job/senior-coldfusion-developer-5925b/
-  Minimum three years’ experience with ColdFusion
-  Database design, normalisation and ability to write/understand complex queries using MSSQL Server 2019
-  Familiarity with Git
-  Flexible skillset covering a wide range of development

Automation Test Engineer – UK Only | Remote | Permanent | Crica £40k - https://app.occupop.com/shared/job/automation-test-engineer-a6545/
-  Minimum three years experience with automated testing
-  Experience with automated testing tools such as selenium
-  Experience with API test tools such as Postman/Fiddler etc
 
 
Benefits of both roles:
-  £4,000 per annum discretionary company bonus scheme
-  25 days annual leave + bank holidays
-  6% employer pension contribution
-  Access to free perks and discounts through Perkbox
-  Long Service Awards
-  Cycle to Work Scheme
-   Company and Team nights out


Other Job Links

ForgeBox Module of the Week

Swagger Redoc UI for ColdBox

This is the Swagger Redoc UI module for ColdBox applications. It was inspired by the cbSwaggerUI module. By default, it looks in the /cbswagger location for the OpenAPI Swagger file.

The UI is available at /redoc - where you will see a visual representation of your Swagger docs.

Based on: https://github.com/Redocly/redoc
Online Demo: https://redocly.github.io/redoc/

https://www.forgebox.io/view/cbswagger-redoc


VS Code Hint Tips and Tricks of the Week

Project Manager

By Alessandro Fragnani

It helps you to easily access your projects, no matter where they are located. Don't miss those important projects anymore.

You can define your own Projects (also called Favorites), or choose for auto-detect Git, Mercurial or SVN repositories, VSCode folders, or any other folder.

Here are some of the features that Project Manager provides:

https://marketplace.visualstudio.com/items?itemName=alefragnani.project-manager

Thank you to all of our Patreon Supporters

These individuals are personally supporting our open source initiatives to ensure the great toolings like CommandBox, ForgeBox, ColdBox,  ContentBox, TestBox and all the other boxes keep getting the continuous development they need, and funds the cloud infrastructure at our community relies on like ForgeBox for our Package Management with CommandBox.

You can support us on Patreon here https://www.patreon.com/ortussolutions

New Patreon - Tomorrows Guides

Don’t forget, we have Annual Memberships, pay for the year and save 10% - great for businesses.

You can see an up to date list of all sponsors on Ortus Solutions' Website
https://ortussolutions.com/about-us/sponsors

Thanks everyone!!!