/ 
Jifty-0.70116
/ Jifty::Module::Pluggable
Security Advisories (3)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

CPANSA-Jifty-2008-01 (2009-04-08)

Allowed all actions on GET.

NAME

Jifty::Module::Pluggable

DESCRIPTION

A custom subclass of Module::Pluggable to override the require mechanism with one that better fits our own view of the world.

require

Date:   October 24, 2006 12:19:31 AM PDT
From:     simon@thegestalt.org
Subject:    Re: Module::Pluggable and CORE::require
To:       jesse@bestpractical.com

On Mon, Oct 23, 2006 at 09:11:22PM -0700, Jesse Vincent said: does this thread make any sense to you? It looks like Module::Pluggable is interacting poorly with UNIVERSAL::require?

Module::Pluggable used to to use UNIVERSAL::require but I switched because I was trying to get rid of dependencies.

I farmed the requiring stuff off to it's own _require method in order to make it easy to subclass so that people could ovveride how the require was done.