A view not set exception is thrown when trying to execution handler ColdBox methods that are not concrete actions when they should be invalid events.

Description

This bug is due to the fact that a user can try to execute any method on a controller. The framework assumes the action exists but does not qualify it. With the fix on this ticket, all core super type and handler methods are now annotated with a cbMethod annotation. Which makes them NON-Executable from the outside world.

Recreation Steps

Assuming the existence of handler Admin.cfc but no event named view

The following URL:

/admin/view/foobar/test.js

will trigger currentView variable has not been set, therefore there is no view to render.

Activity

Show:
Fixed
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Components

Fix versions

Affects versions

Priority

Sentry

Created April 8, 2022 at 3:57 PM
Updated June 17, 2022 at 4:27 PM
Resolved June 17, 2022 at 4:27 PM