/ 
Plack-0.99_22
⭐ Starred 488
/ Plack::Middleware::LighttpdScriptNameFix
Security Advisories (3)
CPANSA-Plack-2015-0202 (2015-02-02)

Fixed a possible directory traversal with Plack::App::File on Win32.

CPANSA-Plack-2014-0801 (2014-08-01)

Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files

CPANSA-Plack-2013-0131 (2013-01-31)

Fixed directory traversal bug in Plack::App::File on win32 environments

NAME

Plack::Middleware::LighttpdScriptNameFix - fixes wrong SCRIPT_NAME and PATH_INFO that lighttpd sets

SYNOPSIS

# in your app.psgi
use Plack::Builder;

builder {
  enable "LighttpdScriptNameFix";
  $app;
};

# Or from the command line
plackup -s FCGI -e 'enable "LighttpdScriptNameFix"' /path/to/app.psgi

DESCRIPTION

This middleware fixes wrong SCRIPT_NAME and PATH_INFO set by lighttpd when you mount your app under the root path ("/"). If you use lighttpd 1.4.23 or later you can instead enable fix-root-scriptname flag inside fastcgi.server instead of using this middleware.

AUTHORS

tadam

Tatsuhiko Miyagawa

SEE ALSO

Plack::Handler::FCGI http://github.com/miyagawa/Plack/issues#issue/68 https://redmine.lighttpd.net/issues/729