• Simplest way to trim and HTML-escape all your form and url variables.
  Just add one single line in your Application.cfm and you are done.
• Prevent visitors from entering malicious code
• Prevent visitors from entering HTML code that can destroy your website design
• Prevent from cross-site scripting (XSS) attack

• ColdFusion 5
• ColdFusion MX 6, 6.1
• ColdFusion 7
• ColdFusion 8

on all operating systems

Supported browsers:
This tag works on server side, so all browsers are compatible

• End users makes mistake when typing values in form. Sometimes they type space without recognizing it. For example in password field, if the user mistakenly hit space at the end of their password, he/she will not be able to login unless we strip the space.
  This is why trimming all form fields are necessary. And by using this <cf_trimvars> you can do it once and for all with only adding one line in Application.cfm. Instead of having to put #trim# all over your code.
• Programmers also makes mistake. For example when programmers type in master data in their database, they may not be aware hitting space after entering data. Thus the master data can't be queried in other functions.
• Cross site scripting attack. Hackers try to add HTML tags or single quote into submitted form.
  <cf_trimvars> escapes those invalid characters.