The biggest 2025 change to ColdFusion’s HTML-to-PDF stack is a security one: IP-based filtering on the Jetty server that hosts the PDF service (PDFg). It shipped in the April 2025 security updates (ColdFusion 2025 Update 1, 2023 Update 13, and 2021 Update 19) and works through an ipaccess module enabled in Jetty's start.ini plus a jetty-ipaccess.xml file in /cfusion/jetty/etc, which holds a whitelist and a blacklist of IP addresses. Alongside it, the 2025 release added PDF form pre-filling in cfhtmltopdf, and Updates 2 and 3 fixed several PDF-service bugs (service registration errors, an encrypted-PDF NoClassDefFoundError, and font embedding). The catch: after the update, many teams hit a "PDF service disappears when I edit it in the Administrator" problem, caused by 127.0.0.1 missing from the new allow list on non-Windows systems. This guide explains what changed, how the Jetty IP filter works, how to configure it safely (including multi-server setups), and how to troubleshoot it, using only what Adobe's documentation and tech notes state.
Read More
Deepak Sir
Posted on Originally published at Medium
ColdFusion HTML-to-PDF Improvements in 2025: cfhtmltopdf, Jetty, and IP Restrictions
For further actions, you may consider blocking this person and/or reporting abuse
Top comments (0)