Blog

Luis Majano

October 15, 2008

Spread the word


Share your thoughts

Ernst has just posted his code for an ssl interceptor he just created. It looks awesome so take a look for yourself.

Add Your Comment

(4)

Jan 19, 2008 23:50:35 UTC

by Rob Gonda

It's missing some functionality ... how does it know which event has to be secured? It should secure only specific events, and force unsecured requests for the rest. something like

if not isSsl and requireSll then cflocate to https

if isSsl and not requireSll then cflocate to http

Jan 19, 2008 23:54:53 UTC

by Luis Majano

That is up to Ernst, but I think its a good start.

Jan 21, 2008 16:01:48 UTC

by Ernst van der Linden

Rob you're right. We could implement that. Just make a list of allowed events without SSL as a property in interceptor xml definition and then check with event.getCurrentEvent() if we need SSL.

I will take a look and keep you informed.

Jan 21, 2008 17:47:57 UTC

by Ernst van der Linden

Rob, I made in new blog entry. The SSL interceptor now supports SSL for specific events.

Comments are welcome!

Recent Entries

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

BoxLang 1.17 Series Part 4 : WriteDump Enhanced!

You call writeDump() on an ORM entity or a very rich class graph . The browser locks up. Thirty seconds later you get a page with forty thousand rows on it, you scroll for a while, you give up, and you go edit your code to dump a sub-key instead. Or worse, you crash the server.

Luis Majano
Luis Majano
September 11, 2026
BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

BoxLang AI 3.4 Blog Series Part 4 : Locking Down Prompt Injection

LLM applications face a class of attack traditional input validation was never built for: prompt injection. An attacker embeds instructions in user input, a retrieved document, a web page your tool fetched, or an MCP result, trying to override your system prompt, exfiltrate data, or hijack a tool call. BoxLang AI 3.4.0 ships four layered, configurable defenses against exactly this, plus one more that's on unconditionally.

Luis Majano
Luis Majano
September 11, 2026