/ 
Jifty-0.90519
/ Jifty::CAS
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::CAS - Jifty's Content-addressable storage facility

SYNOPSIS

my $key = Jifty::CAS->publish('js' => 'all', $content,
                    { hash_with => $content, # default behaviour
                      content_type => 'application/x-javascript',
                      deflate => 1
                    });

$ie_key = Jifty::CAS->publish('js' => 'ie-only', $ie_content,
                    { hash_with => $ie_content,
                      content_type => 'application/x-javascript',
                    });

$key = Jifty::CAS->key('js', 'ie-only');
my $blob = Jifty::CAS->retrieve('js', $key);

DESCRIPTION

Provides an in-memory md5-addressed content store. Content is stored under a "domain", and can be addressed using wither the "key", which is an md5 sum, or the "name", which simply stores the most recent key provided with that name.

METHODS

publish DOMAIN NAME CONTENT METADATA

Publishes the given CONTENT at the address DOMAIN and NAME. METADATA is an arbitrary hash; see Jifty::CAS::Blob for more. Returns the key.

key DOMAIN NAME

Returns the most recent key for the given pair of DOMAIN and NAME, or undef if none such exists.

retrieve DOMAIN KEY

Returns a Jifty::CAS::Blob for the given pair of DOMAIN and KEY, or undef if none such exists.