Security Advisories (3)
CPANSA-Plack-2015-0202 (2015-02-02)

Fixed a possible directory traversal with Plack::App::File on Win32.

CPANSA-Plack-2014-0801 (2014-08-01)

Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files

CPANSA-Plack-2013-0131 (2013-01-31)

Fixed directory traversal bug in Plack::App::File on win32 environments

NAME

Plack::Middleware::ConditionalGET - Middleware to add "conditional", GET

SYNOPSIS

builder {
    enable "Plack::Middleware::ConditionalGET";
    ....
};

DESCRIPTION

This middleware enables conditional GET and HEAD using If-None-Match and If-Modified-Since header. The application should set either or both of Last-Modified or ETag response headers per RFC 2616. When either of the conditions is met, the response body is set to be zero length and the status is set to 304 Not Modified.

SEE ALSO

Rack::ConditionalGet