/ 
Smolder-1.51
River stage one • 1 direct dependent • 1 total dependent
/ Smolder::Control::Developer::Prefs
Security Advisories (1)
CVE-2024-58041 (2026-02-24)

Smolder versions through 1.51 for Perl uses insecure rand() function for cryptographic functions. Smolder 1.51 and earlier for Perl uses the rand() function as the default source of entropy, which is not cryptographically secure, for cryptographic functions. Specifically Smolder::DB::Developer uses the Data::Random library which specifically states that it is "Useful mostly for test programs". Data::Random uses the rand() function.

NAME

Smolder::Control::Developer::Prefs

DESCRIPTION

Controller module for dealing with developer preferences

RUN MODES

change_pw

Show the form to allow a developer to change their password. Uses the Developer/Prefs/change_pw.tmpl template.

process_change_pw

Handled the incoming data from the change_pw run mode. If it passes validation then it updates the database and then returns to the change_pw mode.

show

Show all of the preferences for each project that this developer is assigned to. Uses the Developer/Prefs/show.tmpl template.

get_pref_details

This run mode will return a JSON header which contains the name-value pairs for this preferences data.

update_pref

Update the information coming from the show run mode. If validation passes, the database is updated and the show run mode is returned.