/ 
Yukki-0.991_005
/ Yukki::Web::View::Role::Navigation
Security Advisories (5)
CVE-2021-23562 (2021-12-03)

This affects the package plupload before 2.3.9. A file name containing JavaScript code could be uploaded and run. An attacker would need to trick a user to upload this kind of file.

CVE-2021-41182 (2021-10-26)

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `altField` option of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `altField` option is now treated as a CSS selector. A workaround is to not accept the value of the `altField` option from untrusted sources.

CVE-2021-41183 (2021-10-26)

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of various `*Text` options of the Datepicker widget from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. The values passed to various `*Text` options are now always treated as pure text, not HTML. A workaround is to not accept the value of the `*Text` options from untrusted sources.

CVE-2021-41184 (2021-10-26)

jQuery-UI is the official jQuery user interface library. Prior to version 1.13.0, accepting the value of the `of` option of the `.position()` util from untrusted sources may execute untrusted code. The issue is fixed in jQuery UI 1.13.0. Any string value passed to the `of` option is now treated as a CSS selector. A workaround is to not accept the value of the `of` option from untrusted sources.

CVE-2016-4566 (2016-05-22)

Cross-site scripting (XSS) vulnerability in plupload.flash.swf in Plupload before 2.1.9, as used in WordPress before 4.5.2, allows remote attackers to inject arbitrary web script or HTML via a Same-Origin Method Execution (SOME) attack.

NAME

Yukki::Web::View::Role::Navigation - Common page navigation tools for views

VERSION

version 0.991_005

DESCRIPTION

The top and bottom page menus and breadcrumb are typically managed with similar idioms in the various views. This avoid duplicate code in each.

REQUIRED METHODS

The implementor must provide each of the following:

standard_menu

my @menu_items = $view->standard_menu;

Must return a list of hash references. Each hash reference should provide the following keys:

action

This gives the short action name associated with this item.

label

This is the label to give the menu item. If not given the action will be uesd with the first letter capitalized.

sort

This is a numeric value to use for sorting the menu item. If not given, the default used is 20.

href

This is URI to link to with this menu item. It may contains String::Errf-style interpolations. The variables passed to "page_navigation" will fill in here.

PROVIDED METHODS

page_navigation

$view->page_navigation($ctx->response, $action, \%vars);

This will add navigation items using the menus returned by "standard_menu".

AUTHOR

Andrew Sterling Hanenkamp <hanenkamp@cpan.org>

COPYRIGHT AND LICENSE

This software is copyright (c) 2017 by Qubling Software LLC.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.