foundeo/cfml-security

CFML Security Utilities

CFML Security Utilities

This repository contains some security utilities for CFML (ColdFusion) developers.

securityutil

A CFC with functions such as scrubHTML for sanitizing HTML (removing XSS attempts), and more.

secureupload

A CFC built to help you write more secure uploads.

cfml-security's Issues

Integer function allows non-integers

I noticed there was an "integer" udf in the securityutil CFC. I couldn't find any reference to it being used by the library, but if it is please consider using the following condition to determine whether the value is an integer or not... otherwise post-validation errors could occur when passing values that exceed allowable integer limits.

function isInteger(num){
    return isSimpleValue(num) AND refind("^-?\d+$", num) AND VAL(num) LTE 2147483647 AND VAL(num) GTE -2147483648;
}