Flag method calls (such as createcomponent) in the default field of cfparam and arguments as a performance problem.

[ryaneberly]

Per https://helpx.adobe.com/coldfusion/cfml-reference/coldfusion-tags/tags-p-q/cfparam.html Default expressions are alway evaluated.

So calls to createobject() inside the default expression are performance drag and should be flagged:

Example: <cfparam name="address" default=#createobject('component','objects.address').init()#/>