We are excited to bring you another release for cbSecurity v2.4. This update gives you access to our cross site request forgery module: cbcsrf, which will enhance your securing abilities.

# Install
install cbsecurity

# Update
update cbsecurity

What's New With 2.4.0

This release adds the inclusion of the Cross Site Request Forgery module into cbsecurity: cbcsrf. You can find all the details about this module here: https://github.com/coldbox-modules/cbcsrf. Below are the major features of this module:

Features

• Ability to generate security tokens based on your session
• Automatic token rotation when leveraging cbauth login and logout operations
• Ability to on-demand rotate all security tokens for specific users
• Leverages cbStorages to store your tokens in CacheBox, which can be easily distributed and clustered
• Ability to create multiple tokens via unique reference keys
• Auto-verification interceptor that will verify all non-GET operations to ensure a security token is passed via rc or headers
• Auto-sensing of integration testing so the verifier can allow testing calls
• Token automatic rotation on specific time periods for enhance security
• Helpers to automatically generate hidden fields for the token
• Automatic generation endpoint that can be used for Ajax applications to request tokens for users

We are incredibly excited to bring you a major version of our cbcsrf module, so you can protect your ColdBox applications from cross-site request forgery vectors. This is a major overhaul of the module and it will also be part of the cbSecurity module as well.

Installation/Update

install cbcsrf
update cbcsrf

Please note that if you are upgrading from the 1.x series, make sure you read the documentation as all method signatures have been updated.

Learn how to use Git personal access tokens or username and password to authenticate to a private Git repo in CommandBox 5.

https://commandbox.ortusbooks.com/package-management/code-endpoints/git#password-authentication

At Ortus, our motto has always been Modernize Or Die. We abide by what we preach, so this decision was not taken lightly. After extensive market research and expert consultation, we have decided to change the names of some of our most popular products.  Without further ado, please find the list below of the new names:

• ColdBox – FridgeBox 
• TestBox – MakeItWorkBox
• WireBox – ShockBox
• ForgeBox – ToyBox 
• CommandBox – MasterBox

The aim of the transformation was to find a fresh and modern connection between the consumer and our Box products. Please note that new logos will also be distributed for usage. If you have any questions or comments, feel free to contact us. As part of the open-source community, we welcome all your thoughts.

**

From all of us at Ortus Solutions, Happy April Fools Day! We hope you’re all safe and #StayingAtHome. 

Learn about the new libraries in CommandBox and how to determine the current version of Lucee that your CLI is running.

https://commandbox.ortusbooks.com/

We are excited to bring you another release for cbSecurity packed with security goodness: version 2.3.0. This version focuses on security contexts from ANY layer of a ColdBox application. It will also enhance your functional skills as well, as it introduces some nice semantics for securing your code.

# Install
# install cbsecurity

# Update
update cbsecurity

Making the most out of our time at home may mean finally doing many things you wished you’ve done. To combat boredom, we have compiled a list of fun things to do while staying in. 

Ortus Solutions has been constantly monitoring the developments of COVID-19. Given health officials’ recommendations, we are taking the necessary measures to ensure the safety and wellbeing of partners, attendees, speakers and staff. As such, we have decided to move our conference online.

We are pleased to announce the 3.0.0 release of the Commandbox Docker image. This release offers a number of improvements and optimizations for runtime usage and usage in crafting custom images for deployments.

We've released a very small patch release to CommandBox 5.0.0 which is 5.0.1 and has only 5 tickets.  Most all are related to tweaks for the new server start bash script functionality that we've been rolling into our Ortus CommandBox Docker images.