Security Advisories (2)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

NAME

Jifty::Plugin::User::Mixin::Model::User

DESCRIPTION

package MyApp::Model::User;
use Jifty::DBI::Schema;
use MyApp::Record schema { 
    # column definitions
};

use Jifty::Plugin::User::Mixin::Model::User; # Imports two columns: name and email

set_email ADDRESS

Whenever a user's email is set to a new value, we need to make sure they reconfirm it.

validate_email

Makes sure that the email address looks like an email address and is not taken.