/ 
Plack-1.0021
River stage four • 825 direct dependents • 2094 total dependents
⭐ Starred 488 GitHub stars
/ Plack::Middleware::IIS6ScriptNameFix
Security Advisories (2)
CPANSA-Plack-2015-0202 (2015-02-02)

Fixed a possible directory traversal with Plack::App::File on Win32.

CPANSA-Plack-2014-0801 (2014-08-01)

Plack::App::File would previously strip trailing slashes off provided paths. This in combination with the common pattern of serving files with Plack::Middleware::Static could allow an attacker to bypass a whitelist of generated files

NAME

Plack::Middleware::IIS6ScriptNameFix - fixes wrong SCRIPT_NAME and PATH_INFO that IIS6 sets

SYNOPSIS

# in your app.psgi
use Plack::Builder;

builder {
  enable "IIS6ScriptNameFix";
  $app;
};

# Or from the command line
plackup -s FCGI -e 'enable "IIS6ScriptNameFix"' /path/to/app.psgi

DESCRIPTION

This middleware fixes wrong SCRIPT_NAME and PATH_INFO set by IIS6.

AUTHORS

Florian Ragwitz