Security Advisories (3)
CPANSA-Plack-2015-0202 (2015-02-02)

Fixed a possible directory traversal with Plack::App::File on Win32.

CPANSA-Plack-2014-0801 (2014-08-01)

Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files

CPANSA-Plack-2013-0131 (2013-01-31)

Fixed directory traversal bug in Plack::App::File on win32 environments

NAME

Plack::Middleware::HTTPExceptions - Catch HTTP exceptions

SYNOPSIS

my $app = sub {
    # ...
    MyHTTPError::BadGateway->throw;
};

builder {
    enable "HTTPExceptions";
    $app;
};

DESCRIPTION

Plack::Middleware::HTTPExceptions is a PSGI middleware component to catch exceptions from applicaitions that can be translated into HTTP status code.

Your application is supposed to throw an object that implements code method which returns the HTTP status code such as 501 or 404. This middleware catches them and creates a valid response out of the code.

The exception object may also implement as_string, or overload the stringification, to represent the text of the error, which defaults to the status message of error codes, such as Service Unavailable for 503.

All the other errors that can't be translated into HTTP errors are just rethrown to the outer frame.

AUTHOR

Tatsuhiko Miyagawa

SEE ALSO

paste.httpexceptions