/ 
Jifty-0.60321
/ Jifty::Web::Form::Link
Security Advisories (4)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

CPANSA-Jifty-2006-01 (2006-07-06)

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.

NAME

Jifty::Web::Form::Link - Creates a state-preserving HTML link

DESCRIPTION

Describes an HTML link that may be AJAX-enabled. Most of the computation of this comes from Jifty::Web::Form::Clickable, which generates Jifty::Web::Form::Links.

accessors

Link adds url and escape_label to the list of possible accessors and mutators, in addition to those offered by "accessors" in Jifty::Web::Form::Element.

new PARAMHASH

Creates a new Jifty::Web::Form::Link object. Possible arguments to the PARAMHASH are:

url (optional)

The URL of the link; defaults to the current URL.

tooltip

Additional information about the link target.

escape_label

HTML escape the label and tooltip? Defaults to true

anything from Jifty::Web::Form::Element

Any parameter which "new" in Jifty::Web::Form::Element can take.

url [URL]

Gets or sets the URL that the link links to.

render

Render the string of the link, including any necessary javascript.