/ 
Mojolicious-9.42
River stage four • 1087 direct dependents • 1232 total dependents
⭐ Starred 2674 GitHub stars
/ Mojolicious::Command::Author::generate
Security Advisories (2)
CVE-2024-58134 (2025-05-03)

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. These predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user's session.

CVE-2024-58135 (2025-05-03)

Mojolicious versions from 7.28 for Perl may generate weak HMAC session secrets. When creating a default app with the "mojo generate app" tool, a weak secret is written to the application's configuration file using the insecure rand() function, and used for authenticating and protecting the integrity of the application's sessions. This may allow an attacker to brute force the application's session keys.

NAME

Mojolicious::Command::Author::generate - Generator command

SYNOPSIS

Usage: APPLICATION generate GENERATOR [OPTIONS]

  mojo generate app
  mojo generate lite-app

DESCRIPTION

Mojolicious::Command::Author::generate lists available generators.

This is a core command, that means it is always enabled and its code a good example for learning to build new commands, you're welcome to fork it.

See "COMMANDS" in Mojolicious::Commands for a list of commands that are available by default.

ATTRIBUTES

Mojolicious::Command::Author::generate inherits all attributes from Mojolicious::Commands and implements the following new ones.

description

my $description = $generator->description;
$generator      = $generator->description('Foo');

Short description of this command, used for the command list.

hint

my $hint   = $generator->hint;
$generator = $generator->hint('Foo');

Short hint shown after listing available generator commands.

message

my $msg    = $generator->message;
$generator = $generator->message('Bar');

Short usage message shown before listing available generator commands.

namespaces

my $namespaces = $generator->namespaces;
$generator     = $generator->namespaces(['MyApp::Command::generate']);

Namespaces to search for available generator commands, defaults to Mojolicious::Command::Author::generate.

METHODS

Mojolicious::Command::Author::generate inherits all methods from Mojolicious::Commands and implements the following new ones.

help

$generator->help('app');

Print usage information for generator command.

SEE ALSO

Mojolicious, Mojolicious::Guides, https://mojolicious.org.