/ 
CGI-Session-4.34
River stage two • 43 direct dependents • 56 total dependents

Changes for version 4.34

  • SECURITY: Patch CGI::Session::Driver::file to stop \ and / characters being used in session ids and hence in file names. These characters, possibly combined with '..', could have been used to access files outside the designated session file directory. Reported by TAN Chew Keong of vuln.sg.
  • FIX: Patch CGI::Session to propagate error upwards when _load_pluggables() fails. See RT#37628 and http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=490198.
  • INTERNAL: Ship a machine-readable version of this file under the name Changelog.ini. The latter file is generated by ini.report.pl, which is shipped with Module::Metadata::Changes. The reason Changelog.ini does not contain a separate section for each version in this file is that some of the versions documented below have no datestamp, and ini.report.pl does not create fake datestamps.

Modules

CGI::Session
persistent session data in CGI applications
CGI::Session::Driver
CGI::Session driver specifications
CGI::Session::Driver::DBI
Base class for native DBI-related CGI::Session drivers
CGI::Session::Driver::db_file
CGI::Session driver for BerkeleyDB using DB_File
CGI::Session::Driver::file
Default CGI::Session driver
CGI::Session::Driver::mysql
CGI::Session driver for MySQL database
CGI::Session::Driver::postgresql
PostgreSQL driver for CGI::Session
CGI::Session::Driver::sqlite
CGI::Session driver for SQLite
CGI::Session::ErrorHandler
error handling routines for CGI::Session
CGI::Session::ID::incr
CGI::Session ID driver
CGI::Session::ID::md5
default CGI::Session ID generator
CGI::Session::ID::static
CGI::Session ID Driver for generating static IDs
CGI::Session::Serialize::default
Default CGI::Session serializer
CGI::Session::Serialize::freezethaw
serializer for CGI::Session
CGI::Session::Serialize::storable
Serializer for CGI::Session
CGI::Session::Tutorial
Extended CGI::Session manual

Provides

CGI::Session::Test::Default
in lib/CGI/Session/Test/Default.pm
OverloadedObjectClass
in lib/CGI/Session/Test/Default.pm
SimpleObjectClass
in lib/CGI/Session/Test/Default.pm

Examples

Other files