User Guide Cancel

JVM arguments in ColdFusion (2025 release)

JVM argument

Default

Description

-Dcoldfusion.runtime.remotemethod.matchArguments

True

The flag is set to true by default, which enforces strict argument matching. If a remote method expects certain parameters, those arguments must be explicitly declared using the cfargument tag or defined directly in the function signature. For example, if a remote function is defined to accept two arguments, it must only receive those two. Passing more than the declared number (for example, 10) will result in an error. This change ensures stricter method integrity and a better debugging experience. This behavior change applies only to remote CFC methods.

-Dcoldfusion.systemprobe.allowexecution

False

By default, this flag is set to false for security reasons. The flag prevents the execution of a System Probe during a failure. To enable this functionality, set its value to true.

JVM argument

Default

Description

-Dcoldfusion.pdfg.connectionTimeout

The value is in milliseconds. This is the timeout value that will be set for PDF conversion. If a conversion takes longer than the mentioned value, it will be timed out, and an exception will be thrown.

New in ColdFusion (2025 release)

JVM argument

Default

Description

If true, the flag prevents ColdFusion from dynamically compiling CFML code into Java bytecode at runtime.

-Dcoldfusion.datasource.blocked.properties

  • allowLoadLocalInfile
  • allowUrlInLocalInfile
  • autoDeserialize

The connection strings mentioned are blocked if a new database is added. To allow their usage in the database, remove them from the property.

-Dcoldfusion.compiler.block.bytecode

False

If true, the flag prevents ColdFusion from executing pre-compiled CFML code (Java bytecode) at runtime.

Other flags in ColdFusion (2025 release)

JVM argument

Default

Description

-Dcoldfusion.encryption.useCFMX_COMPATAsDefault

True

This property is removed.

-Dcoldfusion.searchimplicitscopes

True

This property is removed.

-Dcfdocument.metahttpequivrefresh.localfile

True

Impacts how the <cfdocument> tag handles the meta refresh directive when generating PDFs from local files.

-Djdk.lang.Process.allowAmbiguousCommands

False

Related to how Java allows ambiguous command-line parsing on Windows.

-Dcoldfusion.sessioncookie.httponly

False

Determines if session cookies must be restricted from client-side JavaScript access.

-Dcoldfusion.xml.allowPathCharacters

True

Controls whether XML parsing allows file paths (such as slashes /, backslashes \, or colons :) in in element names, attributes, or values.

-Duser.timezone=<timezone>.

 

If you want UTC timezone, use -Duser.timezone=GMT

Sets the time zone of the ColdFusion host.

-Dfile.encoding

UTF-8

Sets the encoding of ColdFusion files, eg, .cfc or .cfm.

-Dcoldfusion.monitoring.id.reset

True

Controls whether monitoring ID used by ColdFusion’s Performance Monitoring Toolset (PMT) must be reset when the server starts.

-Dcoldfusion.number.allowdotsuffix

False

If set to false, an operand that has a trailing dot, is evaluated as a string.

-Djdk.tls.client.protocols

TLSv1.2,TLSv1.3

Specifies the TLS protocols that is used by TLS/SSL clients when establishing secure connections.

-Dhttps.protocols

TLSv1.2,TLSv1.3

Specifies the TLS protocols that is used by HTTPS connections in ColdFusion.

-Dcoldfusion.sftp.enable-ssh-rsa

False

Set the flag to True to enable the ssh-rsa algorithm.

-Dcoldfusion.sftp.fingerprint

SHA256

Set the flag to md5, for example, to enforce SFTP connections using the md5 algorithm.

-Dcoldfusion.application.orderby.caseinsensitive

True

Determines if string columns are being ordered by the Order By clause like traditional databases.

-Dcoldfusion.jdbc.mysql.datetime.str

True

If set to True, converts MySQL datetime objects to strings.

-Dcoldfusion.jdbc.mssql.multi_resultset.supported

True

Controls the resultset parsing behavior for ResultSets.

-Dorg.osgi.framework.bootdelegation

com.singularity.*

Enables scheduled tasks to run in a Docker image.

-Dcoldfusion.orderedstruct.size

32

Sets the size of ordered structs.

-Dcoldfusion.http.usepooling

True

Controls whether HTTP connections should be pooled and reused when making outbound HTTP requests from ColdFusion.

Get help faster and easier

New user?