/ 
Jifty-0.90701
/ Jifty::Server::Prefork::NetServer
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Server::Prefork::NetServer - Sets up children for Jifty::Server::Prefork

METHODS

new

Store the created Net::Server::PreFork object away after creating it.

pre_loop_hook

Tear down the database connection before falling into the accept loop, so that there is no shared database connection for children to inherit.

child_init_hook

Sets up the database connection when spawning a new child.

log

Log messages should use Jifty's Log::Log4perl infrastructure, not STDERR.