Security Advisories (2)
CVE-2012-5572 (2014-05-30)

CRLF injection vulnerability in the cookie method allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name.

CVE-2011-1589 (2011-04-05)

Directory traversal vulnerability (Mojolicious report, but Dancer was vulnerable as well).

NAME

Dancer::Plugin::Ajax - a plugin for adding Ajax route handlers

SYNOPSIS

package MyWebApp;

use Dancer;
use Dancer::Plugin::Ajax;

ajax '/check_for_update' => sub {
    # ... some Ajax code
};

dance;

DESCRIPTION

The ajax keyword which is exported by this plugin allow you to define a route handler optimized for Ajax queries.

The route handler code will be compiled to behave like the following:

  • Pass if the request header X-Requested-With doesnt equal XMLHttpRequest

  • Disable the layout

  • The action built is a POST request.

AUTHOR

This module has been written by Alexis Sukrieh <sukria@sukria.net>