User Guide Cancel

JVM arguments in ColdFusion (2025 release)

JVM argument

Default

Description

-Dcoldfusion.pdfg.connectionTimeout

The value is in milliseconds. This is the timeout value that will be set for PDF conversion. If a conversion takes longer than the mentioned value, it will be timed out, and an exception will be thrown.

New in ColdFusion (2025 release)

JVM argument

Default

Description

If true, the flag prevents ColdFusion from dynamically compiling CFML code into Java bytecode at runtime.

-Dcoldfusion.datasource.blocked.properties

  • allowLoadLocalInfile
  • allowUrlInLocalInfile
  • autoDeserialize

The connection strings mentioned are blocked if a new database is added. To allow their usage in the database, remove them from the property.

-Dcoldfusion.compiler.block.bytecode

False

If true, the flag prevents ColdFusion from executing pre-compiled CFML code (Java bytecode) at runtime.

Other flags in ColdFusion (2025 release)

JVM argument

Default

Description

-Dcoldfusion.encryption.useCFMX_COMPATAsDefault

True

This property is removed.

-Dcoldfusion.searchimplicitscopes

True

This property is removed.

-Dcfdocument.metahttpequivrefresh.localfile

True

Impacts how the <cfdocument> tag handles the meta refresh directive when generating PDFs from local files.

-Djdk.lang.Process.allowAmbiguousCommands

False

Related to how Java allows ambiguous command-line parsing on Windows.

-Dcoldfusion.sessioncookie.httponly

False

Determines if session cookies must be restricted from client-side JavaScript access.

-Dcoldfusion.xml.allowPathCharacters

True

Controls whether XML parsing allows file paths (such as slashes /, backslashes \, or colons :) in in element names, attributes, or values.

-Duser.timezone=<timezone>.

 

If you want UTC timezone, use -Duser.timezone=GMT

Sets the time zone of the ColdFusion host.

-Dfile.encoding

UTF-8

Sets the encoding of ColdFusion files, eg, .cfc or .cfm.

-Dcoldfusion.monitoring.id.reset

True

Controls whether monitoring ID used by ColdFusion’s Performance Monitoring Toolset (PMT) must be reset when the server starts.

-Dcoldfusion.number.allowdotsuffix

False

If set to false, an operand that has a trailing dot, is evaluated as a string.

-Djdk.tls.client.protocols

TLSv1.2,TLSv1.3

Specifies the TLS protocols that is used by TLS/SSL clients when establishing secure connections.

-Dhttps.protocols

TLSv1.2,TLSv1.3

Specifies the TLS protocols that is used by HTTPS connections in ColdFusion.

-Dcoldfusion.sftp.enable-ssh-rsa

False

Set the flag to True to enable the ssh-rsa algorithm.

-Dcoldfusion.sftp.fingerprint

SHA256

Set the flag to md5, for example, to enforce SFTP connections using the md5 algorithm.

-Dcoldfusion.application.orderby.caseinsensitive

True

Determines if string columns are being ordered by the Order By clause like traditional databases.

-Dcoldfusion.jdbc.mysql.datetime.str

True

If set to True, converts MySQL datetime objects to strings.

-Dcoldfusion.jdbc.mssql.multi_resultset.supported

True

Controls the resultset parsing behavior for ResultSets.

-Dorg.osgi.framework.bootdelegation

com.singularity.*

Enables scheduled tasks to run in a Docker image.

-Dcoldfusion.orderedstruct.size

32

Sets the size of ordered structs.

-Dcoldfusion.http.usepooling

True

Controls whether HTTP connections should be pooled and reused when making outbound HTTP requests from ColdFusion.

Get help faster and easier

New user?