Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. These predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user's session.
Mojolicious versions from 7.28 for Perl may generate weak HMAC session secrets. When creating a default app with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand() function, and used for authenticating and protecting the integrity of the application's sessions. This may allow an attacker to brute force the application's session keys.
Mojo::BaseUtil - Common utility functions used in Mojo::Base, re-exported in Mojo::Util
use Mojo::BaseUtil qw(class_to_path monkey_patch);
my $path = class_to_path 'Foo::Bar';
monkey_patch 'MyApp', foo => sub { say 'Foo!' };Mojo::BaseUtil provides functions to both Mojo::Base and Mojo::Util, so that Mojo::Base does not have to load the rest of Mojo::Util, while preventing a circular dependency.
To install Mojolicious, copy and paste the appropriate command in to your terminal.
cpanm Mojoliciousperl -MCPAN -e shell
install MojoliciousFor more information on module installation, please visit the detailed CPAN module installation guide.
| Global | |
|---|---|
| s | Focus search bar |
| ? | Bring up this help dialog |
| GitHub | |
|---|---|
| g p | Go to pull requests |
| g i | go to github issues (only if github is preferred repository) |
| POD | |
|---|---|
| g a | Go to author |
| g c | Go to changes |
| g i | Go to issues |
| g d | Go to dist |
| g r | Go to repository/SCM |
| g s | Go to source |
| g b | Go to file browse |
| Search terms | |
|---|---|
| module: (e.g. module:Plugin) | |
| distribution: (e.g. distribution:Dancer auth) | |
| author: (e.g. author:SONGMU Redis) | |
| version: (e.g. version:1.00) |