Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Plugin::Prototypism

SYNOPSIS

# In your jifty config.yml under the framework section:

Plugins:
  - Prototypism
      cdn: 'http://yourcdn.for.static.prefix/'

DESCRIPTION

This module provides the Prototype and Scriptaculous javascript libraries to your application. Jifty used to rely on these libraries, so this plugin may be automatically added to your application's plugins if you upgrade from an older version of Jifty. It is safe to remove if your application does not use Prototype or Scriptaculous javascript code, however.

METHODS

init

On initialization, adds Jifty compatibility methods if the configuration file version is before 4.