/ 
libwww-perl-5.21
River stage four • 2204 direct dependents • 6286 total dependents
/ HTML::Entities
Security Advisories (4)
CPANSA-libwww-perl-2017-01 (2017-11-06)

LWP::Protocol::file can open existent file from file:// scheme. However, current version of LWP uses open FILEHANDLE,EXPR and it has ability to execute arbitrary command

CVE-2011-0633 (2011-01-20)

The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated.

CVE-2010-2253 (2010-07-06)

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

CPANSA-libwww-perl-2001-01 (2001-03-14)

If LWP::UserAgent::env_proxy is called in a CGI environment, the case-insensitivity when looking for "http_proxy" permits "HTTP_PROXY" to be found, but this can be trivially set by the web client using the "Proxy:" header.

NAME

HTML::Entities - Encode or decode strings with HTML entities

SYNOPSIS

use HTML::Entities;

$a = "Våre norske tegn bør &#230res";
decode_entities($a);
encode_entities($a, "\200-\377");

DESCRIPTION

This module deals with encoding and decoding of strings with HTML character entites. The module provide the following functions:

decode_entities($string)

This routine replaces HTML entities found in the $string with the corresponding ISO-8859/1 character. Unrecognized entities are left alone.

endode_entities($string, [$unsafe_chars])

This routine replaces unsafe characters in $string with their entity representation. A second argument can be given to specify which characters to concider as unsafe. The default set of characters to expand are control chars, high-bit chars and the '<', '&', '>' and '"' character.

Both routines modify the string passed in as the first argument if called in void context. In scalar and array context the encoded or decoded string is returned (and the argument string is left unchanged).

If you prefer not to import these routines into your namespace you can call them as:

use HTML::Entities ();
$encoded = HTML::Entities::encode($a);
$decoded = HTML::Entities::decode($a);

The module can also export the %char2entity and the %entity2char hashes which contains the mapping from all characters to the corresponding entities.

COPYRIGHT

Copyright 1995-1997 Gisle Aas. All rights reserved.

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.