/ 
Catalyst-Plugin-Static-Simple-0.05
River stage three • 48 direct dependents • 117 total dependents
Security Advisories (1)
CVE-2017-16248 (2017-10-31)

The Catalyst-Plugin-Static-Simple module before 0.34 for Perl allows remote attackers to read arbitrary files if there is a '.' character anywhere in the pathname, which differs from the intended policy of allowing access only when the filename itself has a '.' character.

Changes for version 0.05 - 2005-08-26

  • Added use_apache option to enable the Apache DECLINED support. Default is disabled as it appears Catalyst is faster at serving the files!
  • Added a check that Apache's DocumentRoot matches Catalyst's root before serving DECLINED.
  • Preload MIME::Types index during setup() so it's not built on the first request.
  • Added a note on performance of Apache vs. Catalyst.

Modules

Catalyst::Plugin::Static::Simple
Make serving static pages painless.

Other files