Security Advisories (4)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

CPANSA-Jifty-2006-01 (2006-07-06)

Jifty did not protect users against a class of remote data access vulnerability. If an attacker knew the structure of your local filesystem and you were using the "standalone" webserver in production, the attacker could gain read only access to local files.

NAME

Jifty::Script::Help - Show help

SYNOPSIS

help COMMAND

OPTIONS

Optionally help can pipe through a pager, to make it easier to read the output if it is too long. For using this feature, please set environment variable PAGER to some pager program. For example:

# bash, zsh users
export PAGER='/usr/bin/less'

# tcsh users
setenv PAGER '/usr/bin/less'

help_base

Jifty's help system also looks in Jifty::Manual and the subdirectories for any help commands that it can't find help for.

AUTHOR

Various folks at Best Practical Solutions, LLC.