IMO, this would only be a "bug" if you put that code into a production environment. If you want a "worse bug", dump the server scope.

Not sure what you think is a bug here - that's expected behavior. You are dumping the main J2EE application context because you have an empty application name. If you are on a shared host, this will dump everyone's application scope data (since it's all stored in the shared J2EE application context). That's just how J2EE web applications work.

Correct, it isn't a bug but a side-effect of the underlying servlet context that CF runs within. Basically, if you have sensitive information, you do not want to be running the app on a shared host (for a number of reasons including this).

To Adrian: SERVER scope is shared scope between applications, so no wonder it will show what it will show.
To Joshua, Sean, Brian: Yes, i understand why it show all that info, but what i mean is that probably it isn't something that would be normal to happen. I mean that it should not be really difficult that "side-effect" to not be allowed and say instead of dumping all that info for empty application names, it just to show nothing. In current way this work i would say this is a security issue for shared hosting. And i am sure Adobe as well as we, want more hosting companies to provide CF Hosting without to have complains about coldfusion security issues.

درخواست عكس وفيلم سكسي