Security Advisories (1)
CPANSA-Dancer2-2018-01 (2018-01-30)

There is a potential RCE with regards to Storable. We have added session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE.

NAME

Dancer2::Template::Simple - Pure Perl 5 template engine for Dancer2

VERSION

version 0.202000

SYNOPSIS

To use this engine, you may configure Dancer2 via config.yaml:

template: simple

DESCRIPTION

This template engine is provided as a default one for the Dancer2 micro framework.

This template engine should be fine for development purposes but is not a powerful one, it's written in pure Perl and has no C bindings to accelerate the template processing.

If you want to power an application with Dancer2 in production environment, it's strongly advised to switch to Dancer2::Template::TemplateToolkit.

METHODS

render($template, \%tokens)

Renders the template. The first arg is a filename for the template file or a reference to a string that contains the template. The second arg is a hashref for the tokens that you wish to pass to Template::Toolkit for rendering.

SYNTAX

A template written for Dancer2::Template::Simple should be working just fine with Dancer2::Template::TemplateToolkit. The opposite is not true though.

variables

To interpolate a variable in the template, use the following syntax:

<% var1 %>

If var1 exists in the tokens hash given, its value will be written there.

SEE ALSO

Dancer2, Dancer2::Core::Role::Template, Dancer2::Template::TemplateToolkit.

AUTHOR

Dancer Core Developers

COPYRIGHT AND LICENSE

This software is copyright (c) 2016 by Alexis Sukrieh.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.