Private method is accessible from handler. Affected to 10.10 and above

Description

Not sure is that related, but this is also happen to 10.10 and above
Variable in renderView is accessible from it’s parent’s view.

e.g.

 

<cfscript>

testVariable = “abc“;

</cfscript>

<cfoutput>

#renderView( 'test' );

</cfoutput>

 

in test.cfm is able to dump out “abc“ which is not possible in 10.8 and 10.9

<cfoutput>

<Cfdump var=”#testVariable#”>

</cfoutput>

 

I have test to run on coldbox, it have the same problem on Coldbox 5

https://ortussolutions.atlassian.net/browse/COLDBOX-788

Environment

None

Assignee

Unassigned

Reporter

Johnson Cheng

Labels

None

Accepted

Yes

Fix versions

Affects versions

Priority

Highest
Configure