Fix module settings param for Lucee 6 - COLDBOX-1385

[michaelborn]

Description

Lucee 6.2.5+48 does not like this syntax in coldbox's ModuleService:

param name="globalModuleSettings[ mConfig.modelNamespace ]" default="#structNew()#";

Jira Issues

https://ortussolutions.atlassian.net/browse/COLDBOX-1385

Type of change

Please delete options that are not relevant.

• Bug Fix

Checklist

• My code follows the style guidelines of this project cfformat
• I have commented my code, particularly in hard-to-understand areas
• I have made corresponding changes to the documentation
• I have added tests that prove my fix is effective or that my feature works
• New and existing unit tests pass locally with my changes

[Copilot]

Pull request overview

Fixes a Lucee 6 parsing incompatibility in ModuleService when ensuring a nested moduleSettings struct exists for a module namespace.

Changes:

• Replaces param name="globalModuleSettings[ ... ]" usage with an explicit keyExists() check and initialization.
• Preserves the existing behavior of merging global module settings into module config settings.

[Copilot]

Spacing around the if condition is inconsistent with the rest of this file (which uses if ( ... )). Please format this as if ( ... ) for consistency/readability.

Suggested change

	if( !globalModuleSettings.keyExists( mConfig.modelNamespace ) ) {
	if ( !globalModuleSettings.keyExists( mConfig.modelNamespace ) ) {

[lmajano]

I don't want to change something that has worked since the Adobe 2018 days. This is a Lucee regression and must be reported to them

[michaelborn]

I wrote this up here:

https://luceeserver.atlassian.net/browse/LDEV-6287

But it turns out this is actually due to Lucee 6 limiting evaluation features under the new this.security.limitEvaluation setting, which was enabled on the client app I encountered this on.

In short, we'll need to warn developers one of two things:

1. Either allow insecure evaluation via this.security.limitEvaluation = false, OR
2. Don't upgrade ColdBox apps past Lucee 5.4.7.

See https://docs.lucee.org/recipes/environment-variables-system-properties.html#lucee_security_limitevaluation