Security Advisories (2)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

CPANSA-Jifty-2009-01 (2009-04-09)

The REST plugin would let you call any method on the model.

NAME

Jifty::Script::Env - access the Jifty environment

DESCRIPTION

Loads Jifty and your configuration, allowing you to verify and examine your setup.

run

jifty env <Class> <method> [arguments]

Loads Jifty::Class and calls method on it, providing shortcuts for things like:

perl -MJifty::Util -e 'print Jifty::Util->share_root, "\n";'

The class and method can be combined with a '->' But, unquoted '>' is a redirect so simply use the '-' or '.' characters.

jifty env  Util share_root
jifty env 'Util->share_root'
jifty env  Util.share_root

You may chain accessors. A leading dot also means the class is Jifty.

jifty env Jifty.config.framework ApplicationName
jifty env .config.framework ApplicationName

With no arguments, acts as 'jifty env Jifty.config.stash'.