Security Advisories (4)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

CPANSA-Jifty-2006-01 (2006-07-06)

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.

NAME

Jifty::Response - Canonical internal representation of the result of a Jifty::Action

DESCRIPTION

The answer to a Jifty::Request is a Jifty::Response object. Currently, the response object exists merely to collect the Jifty::Result objects of each Jifty::Action that ran.

new

Creates a new Jifty::Response object.

result MONIKER [RESULT]

Gets or sets the Jifty::Result of the Jifty::Action with the given MONIKER.

results

Returns a hash which maps moniker to its Jifty::Result

messages

Returns the aggregate messages of all of the Jifty::Results.

success

Returns true if none of the results are failures.

failure

Returns true if any of the results failed.