LDEV-4854 use stricter application options for admin

test search results
lucee · May 16, 2024 · 2853ebc · 2853ebc
1 parent d2484eb
commit 2853ebc
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/core/src/main/cfml/context/admin/Application.cfc b/core/src/main/cfml/context/admin/Application.cfc
@@ -34,6 +34,9 @@ this.sessionCookie.path = getAppFolderPath();  // the admin is always in a folde
 this.tag.cookie.sameSite = "strict";
 this.tag.cookie.path = getAppFolderPath();
 this.tag.cookie.httpOnly = true; // prevent access to session cookies from javascript
+this.searchImplicitScopes = false;
+this.searchResults = false;
+this.security.limitEvaluation = true;
 
 this.xmlFeatures = {
 	externalGeneralEntities: false,