/ 
App-Context-0.968
River stage one • 2 direct dependents • 2 total dependents
/ App::Serializer::OneLine
Security Advisories (1)
CVE-2012-6141 (2014-06-04)

The App::Context module 0.01 through 0.968 for Perl does not properly use the Storable::thaw function, which allows remote attackers to execute arbitrary code via a crafted request to (1) App::Session::Cookie or (2) App::Session::HTMLHidden, which is not properly handled when it is deserialized.

NAME

App::Serializer::OneLine - Interface for serialization and deserialization

SYNOPSIS

use App;

$context = App->context();
$serializer = $context->service("Serializer");  # or ...
$serializer = $context->serializer();
$data = {
    an => 'arbitrary',
    collection => [ 'of', 'data', ],
    of => {
        arbitrary => 'depth',
    },
};
$perl = $serializer->serialize($data);
$data = $serializer->deserialize($perl);
print $serializer->dump($data), "\n";

DESCRIPTION

A Serializer allows you to serialize a structure of data of arbitrary depth to a scalar and deserialize it back to the structure.

The OneLine serializer uses a simplified perl data structure syntax as the serialized form of the data. It is meant for parsing human-entered data and writing human-readable data. (Sometimes, the one line does get pretty long.)