Use XML and WDDX

You can use Adobe ColdFusion to create, use, and manipulate XML documents. You can also use Web Distributed Data Exchange (WDDX), an XML dialect, for transmitting structured data, including transferring data between applications and between CFML and JavaScript.

Starting in ColdFusion (2025.0.08), ColdFusion blocks XML containing a <!DOCTYPE ...> declaration by default in XML parsing functions and tags. To allow a trusted DOCTYPE declaration, explicitly pass ALLOWDOCTYPEDECLARATION=true using the parser options supported by the relevant API.

For most applications, leave DOCTYPE declarations blocked and keep external entities disabled.