name

no name

The application name. If you do not set this variable, or set it to the empty string, your CFC applies to the unnamed application scope, which is the ColdFusion J2EE servlet context. For more information on unnamed scopes see "Sharing data between ColdFusion pages and JSP pages or servlets" in the ColdFusion Developer's Guide.

applicationTimeout

Administrator value

Life span, as a real number of days, of the application, including all Application scope variables. Use the CFML CreateTimeSpan function to generate this variable's value.

clientManagement

Administrator value

Whether the application supports Client scope variables.

clientStorage

Administrator value

Where Client variables are stored; can be cookie, registry, or the name of a data source.

loginStorage

cookie

Whether to store login information in the Cookie scope or the Session scope.

sessionManagement

no

Whether the application supports Session scope variables.

sessionTimeout

Administrator value

Life span, as a real number of days, of the user session, including all Session variables. Use the CFML CreateTimeSpan function to generate this variable's value.

setClientCookies

True

Whether to send CFID and CFTOKEN cookies to the client browser.

setDomainCookies

False

Whether to set CFID and CFTOKEN cookies for a domain (not just a host).

scriptProtect

Administrator value

Whether to protect variables from

cross-site scripting attacks.

secureJSON

Administrator value

A Boolean value that specifies whether to add a security prefix in front of the value that a ColdFusion function returns in JSON-format in response to a remote call.

The default value is the value of the Prefix serialized JSON setting in the Administrator Server Settings > Settings page (which defaults to false). You can override this value in the cffunction tag.

For more information see "Improving security" in the ColdFusion Developer's Guide.

secureJSONPrefix

Administrator value

The security prefix to put in front of the value that a ColdFusion function returns in JSON-format in response to a remote call if the secureJSON setting is true.

The default value is the value of the Prefix serialized JSON setting in the Administrator Server Settings > Settings page (which defaults to //, the JavaScript comment character).

For more information see "Improving security" in the ColdFusion Developer's Guide.

welcomeFileList

A comma-delimited list of names of files. Tells ColdFusion not to call the onMissingTemplate method if the files are not found. Use this variable to prevent ColdFusion from invoking the onMissingTemplate handler if all of the following items are true:

• Your web server (e.g., web.xml file) has a welcome file list with CFML pages such as index.cfm that it tries to run if a URL specifies a path ending in a directory.
• The web server sends a request for CFML pages the welcome list to ColdFusion without first determining if the page exists.
• You want to support directory browsing in directories that do not have any of the files on the welcome file list.

You specify this variable only if the Application.cfc file also specifies an onMissingTemplate handler. It should contain the same list of files as your web.xml welcome file list.

Note: You do not need to use the welcomeFileList variable with most "pure" web servers, such as Apache. You do need to use the welcomeFileList variable with most integrated web and application servers, such as the integrated ColdFusion/JRun web server.