Adding the Access-Control-Allow-Origin header in ColdFusion and Lucee is fairly easy, but what about when you want to add multiple domains for Access-Control-Allow-Origin? It can be done with the function described here.
In addition to the IIS setting for file upload size, Lucee is impacted by the .NET framework's upload size restrictions.
Just a tip for those installing Lucee with the IIS connector... it is NOT secure by default. When you add a new IIS website, it will automatically create a folder for the Web context for that website. The administrator screens in that context are NOT password protected. I have not confirmed if this is true on other Web server platforms (Apache, etc).
By default, the cfspreadsheet-lucee extension does not allow you to install it at the server context level. It only installs at the web context level. Here are some instructions to modify it and get it running on the server level, making it available to all contexts on your server.
A simple JVM update misunderstanding caused a real mess on one of our ColdFusion 11 (Windows) servers.
For those who might run into this, below are the steps. These could also be used as instructions for updating the Java JVM that ColdFusion 11 runs on - if you didn't install it to the <drive>:\ColdFusion11\jvm folder.