/ 
libwww-perl-5.821
River stage four • 2388 direct dependents • 7054 total dependents
⭐ Starred 204 GitHub stars
/ HTTP::Cookies::Microsoft
Security Advisories (3)
CPANSA-libwww-perl-2017-01 (2017-11-06)

LWP::Protocol::file can open existent file from file:// scheme. However, current version of LWP uses open FILEHANDLE,EXPR and it has ability to execute arbitrary command

CVE-2011-0633 (2011-01-20)

The Net::HTTPS module in libwww-perl (LWP) before 6.00, as used in WWW::Mechanize, LWP::UserAgent, and other products, when running in environments that do not set the If-SSL-Cert-Subject header, does not enable full validation of SSL certificates by default, which allows remote attackers to spoof servers via man-in-the-middle (MITM) attacks involving hostnames that are not properly validated.

CVE-2010-2253 (2010-07-06)

lwp-download in libwww-perl before 5.835 does not reject downloads to filenames that begin with a . (dot) character, which allows remote servers to create or overwrite files via (1) a 3xx redirect to a URL with a crafted filename or (2) a Content-Disposition header that suggests a crafted filename, and possibly execute arbitrary code as a consequence of writing to a dotfile in a home directory.

NAME

HTTP::Cookies::Microsoft - access to Microsoft cookies files

SYNOPSIS

use LWP;
use HTTP::Cookies::Microsoft;
use Win32::TieRegistry(Delimiter => "/");
my $cookies_dir = $Registry->
     {"CUser/Software/Microsoft/Windows/CurrentVersion/Explorer/Shell Folders/Cookies"};

$cookie_jar = HTTP::Cookies::Microsoft->new(
                  file     => "$cookies_dir\\index.dat",
                  'delayload' => 1,
              );
my $browser = LWP::UserAgent->new;
$browser->cookie_jar( $cookie_jar );

DESCRIPTION

This is a subclass of HTTP::Cookies which loads Microsoft Internet Explorer 5.x and 6.x for Windows (MSIE) cookie files.

See the documentation for HTTP::Cookies.

METHODS

The following methods are provided:

$cookie_jar = HTTP::Cookies::Microsoft->new;

The constructor takes hash style parameters. In addition to the regular HTTP::Cookies parameters, HTTP::Cookies::Microsoft recognizes the following:

delayload:       delay loading of cookie data until a request
                 is actually made. This results in faster
                 runtime unless you use most of the cookies
                 since only the domain's cookie data
                 is loaded on demand.

CAVEATS

Please note that the code DOESN'T support saving to the MSIE cookie file format.

AUTHOR

Johnny Lee <typo_pl@hotmail.com>

COPYRIGHT

Copyright 2002 Johnny Lee

This library is free software; you can redistribute it and/or modify it under the same terms as Perl itself.