/ 
Jifty-0.60321
/ Jifty::ClassLoader
Security Advisories (4)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

CPANSA-Jifty-2006-01 (2006-07-06)

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.

NAME

Jifty::ClassLoader - Loads the application classes

DESCRIPTION

Jifty::ClassLoader loads all of the application's model and action classes, generating classes on the fly for Collections of pre-existing models.

new

Returns a new ClassLoader object. Doing this installs a hook into @INC that allows Jifty::ClassLoader to dynamically create needed classes if they do not exist already.

INC

The hook that is called when a module has been require'd that cannot be found on disk. The following stub classes are auto-generated:

Application

An empty application base class is created that doen't provide any methods or inherit from anything.

Application::Record

An empty class that descends from Jifty::Record is created.

Application::Collection

An empty class that descends from Jifty::Collection is created.

ApplicationClass::Notification.

An empty class that descends from Jifty::Notification.

ApplicationClass::Dispatcher.

An empty class that descends from Jifty::Dispatcher.

Application::Bootstrap

An empty class that descends from Jifty::Bootstrap.

CurrentUserClass (generally Application::CurrentUser)

...where CurrentUserClass is defined by the CurrentUserClass from the configuration file. This defaults to an empty class which is a subclass of Jifty::CurrentUser.

Application::Model::AnythingCollection

If Application::Model::Something is a valid model class, then it creates a subclass of Jifty::Collection whose record_class is Application::Model::Something.

Application::Action::(Create or Update or Delete)Anything

If Application::Model::Something is a valid model class, then it creates a subclass of Jifty::Action::Record::Create, Jifty::Action::Record::Update, or Jifty::Action::Record::Delete whose record_class is Application::Model::Something.

return_class CODE

A helper method; takes CODE as a string and returns an open filehandle containing that CODE.

require

Loads all of the application's Actions and Models. It additionally require's all Collections and Create/Update actions for each Model base class -- which will auto-create them using the above code if they do not exist on disk.