boxlang-security

Codify secure coding patterns and runtime controls for BoxLang applications.

16|78|Updated Nov 28, 2014
One-click install
npx skills add https://github.com/ortus-docs/coldbox-docs --skill boxlang-security
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: boxlang-security
Source: https://github.com/ortus-docs/coldbox-docs/tree/main/.agents/skills/boxlang-security
Command: npx skills add https://github.com/ortus-docs/coldbox-docs --skill boxlang-security

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

BoxLang-security identifies and mitigates security risks in BoxLang applications by codifying secure coding patterns and runtime controls, enabling developers to build safer apps from the ground up.

Core Features & Use Cases

  • Runtime security configuration guidance to restrict dangerous imports, BIFs, and components.
  • Injection and data handling best practices including SQL, XSS, CSRF, and path traversal prevention.
  • File upload, secrets management, authentication, session hardening, and input validation patterns.

Quick Start

Review your BoxLang projects and implement the security patterns described above in configuration, input handling, and session management.

Frequently Asked Questions about boxlang-security

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent SQL injection and XSS in BoxLang applications?

Prevent SQL injection and XSS in BoxLang by enforcing secure coding patterns like parameterized queries and proper output encoding. These controls mitigate data handling risks by validating input and restricting dangerous runtime components.

How do I secure file uploads and manage secrets in a BoxLang project?

Secure file uploads and manage secrets in BoxLang by implementing safe file handling patterns and environment-based secrets management. These controls ensure sensitive data is protected through vetted modules and runtime configuration guardrails.

What are the best practices for authentication and session hardening in BoxLang?

Authentication and session hardening best practices in BoxLang involve implementing token validation and server scope restrictions. These runtime controls protect user sessions by codifying secure configuration patterns across CFML and Java ecosystems.

How do I restrict dangerous runtime imports and components in BoxLang?

Restrict dangerous imports and components in BoxLang through runtime security configuration. This approach mitigates security risks by blocking unsafe built-in functions and components, establishing strong development guardrails for your application.

Does BoxLang security guidance apply to existing CFML and Java ecosystems?

BoxLang security guidance applies across CFML, Java, and BoxLang ecosystems. It codifies secure coding patterns and runtime controls that address historical security risks, enabling developers to build safer applications from the ground up.