HTML template passed to Coldfusion. The main template tag has an additional attribute:
<head profile="http://abc.com">
The problem is that when generating output based on this template, Coldfusion injects its scripts inside the main tag:
<head <script type="text/javascript" src="/CFIDE/scripts/cfform.js"></script>
<script type="text/javascript" src="/CFIDE/scripts/masks.js"></script>
profile="http://abc.com">
This causes the profile="http://abc.com">top of the page to appear and prevents the page from being checked.
Code entry occurs only when there is a form tag. Incorrect entries do not occur if the head tag has no attributes. The presence of an attribute is a project requirement and cannot be omitted.
Is it possible to prevent Coldfusion from scripting?
Alex source
share