/ 
Jifty-0.70416
/ Jifty::Plugin::Authentication::Password::Dispatcher
Security Advisories (2)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

NAME

Jifty::Plugin::Authentication::Password::Dispatcher

DESCRIPTION

All the dispatcher rules jifty needs to support "" in Jifty::Authentication::Password

RULES

before logout

before *

on qr/^(?:passwordreminder|signup)$/

on login

on passwordreminder

on signup

# Sign up for an account

on login

Login

not_logged_in_nav

logged_in_nav