Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Event::Model - Events representing changes to records

DESCRIPTION

Objects in this class represent changes to Jifty::Record classes (any action on a model class) as Jifty::Events.

As yet, this functionality is unused.

new

creates a new Jifty::Event::Model object. If PubSub is enabled for your application, checks to make sure that this event has the following (under-documented) parameters:

record_id record_class action_class action_arguments timestamp result as_hash_before as_hash_after current_user_id