The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.
The REST plugin would let you call any method on the model.
Allowed all actions on GET.
Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.
Jifty::JSON - parse and convert to JSON (JavaScript Object Notation). This is a temporary fork of the JSON.pm code to allow for outputting single quotes. I expect that the single-quote patch will go into JSON.pm core in not too long, eliminating the need for this fork.
To install Jifty, copy and paste the appropriate command in to your terminal.
cpanm Jiftyperl -MCPAN -e shell
install JiftyFor more information on module installation, please visit the detailed CPAN module installation guide.
| Global | |
|---|---|
| s | Focus search bar |
| ? | Bring up this help dialog |
| GitHub | |
|---|---|
| g p | Go to pull requests |
| g i | Go to GitHub issues (only if GitHub is preferred repository) |
| POD | |
|---|---|
| g a | Go to author |
| g c | Go to changes |
| g i | Go to issues |
| g d | Go to dist |
| g r | Go to repository/SCM |
| g s | Go to source |
| g b | Go to file browse |
| Search terms |
|---|
| module: (e.g. module:Plugin) |
| distribution: (e.g. distribution:Dancer auth) |
| author: (e.g. author:SONGMU Redis) |
| version: (e.g. version:1.00) |