Just wanted to pass along a link to a newly published article on the Adobe Developer Connection related to ColdFusion and security: Securing your applications using HttpOnly cookies with ColdFusion by Pete Freitag.
You can also take this as your monthly reminder that the ADC is both a) cool and b) worth checking out often!