/ 
Jifty-0.90409
/ Jifty::CAS
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::CAS - Jifty's Content-addressable storage facility

SYNOPSIS

my $key = Jifty::CAS->publish('js' => 'all', $content,
                    { hash_with => $content, # default behaviour
                      content_type => 'application/x-javascript',
                      deflate => 1
                    });

$ie_key = Jifty::CAS->publish('js' => 'ie-only', $ie_content,
                    { hash_with => $ie_content,
                      content_type => 'application/x-javascript',
                    });

$key = Jifty::CAS->key('js', 'ie-only');
my $blob = Jifty::CAS->retrieve('js', $key);

DESCRIPTION