Security Advisories (10)
CPANSA-Mojolicious-2022-03 (2022-12-10)

Mojo::DOM did not correctly parse <script> tags.

CPANSA-Mojolicious-2021-02 (2021-06-01)

Small sessions could be used as part of a brute-force attack to decode the session secret.

CVE-2021-47208 (2021-03-16)

A bug in format detection can potentially be exploited for a DoS attack.

CVE-2018-25100 (2018-02-13)

Mojo::UserAgent::CookieJar leaks old cookies because of the missing host_only flag on empty domain.

CPANSA-Mojolicious-2015-01 (2015-02-02)

Directory traversal on Windows

CPANSA-Mojolicious-2018-03 (2018-05-19)

Mojo::UserAgent was not checking peer SSL certificates by default.

CVE-2020-36829 (2020-11-10)

Mojo::Util secure_compare can leak the string length. By immediately returning when the two strings are not the same length, the function allows an attacker to guess the length of the secret string using timing attacks.

CPANSA-Mojolicious-2018-02 (2018-05-11)

GET requests with embedded backslashes can be used to access local files on Windows hosts

CPANSA-Mojolicious-2014-01 (2014-10-07)

Context sensitivity of method param could lead to parameter injection attacks.

CVE-2024-58134 (2025-05-03)

Mojolicious versions from 0.999922 for Perl uses a hard coded string, or the application's class name, as a HMAC session secret by default. These predictable default secrets can be exploited to forge session cookies. An attacker who knows or guesses the secret could compute valid HMAC signatures for the session cookie, allowing them to tamper with or hijack another user's session.

NAME

Mojo::Collection - Collection

SYNOPSIS

use Mojo::Collection;

# Manipulate collection
my $collection = Mojo::Collection->new(qw(just works));
unshift @$collection, 'it';

# Chain methods
$collection->map(sub { ucfirst })->shuffle->each(sub {
  my ($word, $count) = @_;
  say "$count: $word";
});

# Stringify collection
say $collection->join("\n");
say "$collection";

# Use the alternative constructor
use Mojo::Collection 'c';
c(qw(a b c))->join('/')->url_escape->say;

DESCRIPTION

Mojo::Collection is an array-based container for collections.

# Access array directly to manipulate collection
my $collection = Mojo::Collection->new(1 .. 25);
$collection->[23] += 100;
say for @$collection;

FUNCTIONS

Mojo::Collection implements the following functions, which can be imported individually.

c

my $collection = c(1, 2, 3);

Construct a new array-based Mojo::Collection object.

METHODS

Mojo::Collection implements the following methods.

compact

my $new = $collection->compact;

Create a new collection with all elements that are defined and not an empty string.

each

my @elements = $collection->each;
$collection  = $collection->each(sub {...});

Evaluate callback for each element in collection or return all elements as a list if none has been provided. The element will be the first argument passed to the callback and is also available as $_.

$collection->each(sub {
  my ($e, $count) = @_;
  say "$count: $e";
});

first

my $first = $collection->first;
my $first = $collection->first(qr/foo/);
my $first = $collection->first(sub {...});

Evaluate regular expression or callback for each element in collection and return the first one that matched the regular expression, or for which the callback returned true. The element will be the first argument passed to the callback and is also available as $_.

my $five = $collection->first(sub { $_ == 5 });

flatten

my $new = $collection->flatten;

Flatten nested collections/arrays recursively and create a new collection with all elements.

grep

my $new = $collection->grep(qr/foo/);
my $new = $collection->grep(sub {...});

Evaluate regular expression or callback for each element in collection and create a new collection with all elements that matched the regular expression, or for which the callback returned true. The element will be the first argument passed to the callback and is also available as $_.

my $interesting = $collection->grep(qr/mojo/i);

join

my $stream = $collection->join;
my $stream = $collection->join("\n");

Turn collection into Mojo::ByteStream.

$collection->join("\n")->say;

last

my $last = $collection->last;

Return the last element in collection.

map

my $new = $collection->map(sub {...});

Evaluate callback for each element in collection and create a new collection from the results. The element will be the first argument passed to the callback and is also available as $_.

my $doubled = $collection->map(sub { $_ * 2 });

new

my $collection = Mojo::Collection->new(1, 2, 3);

Construct a new array-based Mojo::Collection object.

pluck

my $new = $collection->pluck($method);
my $new = $collection->pluck($method, @args);

Call method on each element in collection and create a new collection from the results.

# Equal to but more convenient than
my $new = $collection->map(sub { $_->$method(@args) });

reverse

my $new = $collection->reverse;

Create a new collection with all elements in reverse order.

slice

my $new = $collection->slice(4 .. 7);

Create a new collection with all selected elements.

shuffle

my $new = $collection->shuffle;

Create a new collection with all elements in random order.

size

my $size = $collection->size;

Number of elements in collection.

sort

my $new = $collection->sort;
my $new = $collection->sort(sub {...});

Sort elements based on return value of callback and create a new collection from the results.

my $insensitive = $collection->sort(sub { uc(shift) cmp uc(shift) });

tap

$collection = $collection->tap(sub {...});

Alias for "tap" in Mojo::Base.

uniq

my $new = $collection->uniq;

Create a new collection without duplicate elements.

AUTOLOAD

In addition to the "METHODS" above, you can also call methods provided by all elements in the collection directly and create a new collection from the results, similar to "pluck".

push @$collection, Mojo::DOM->new("<div><h1>$_</h1></div>") for 1 .. 9;
say $collection->find('h1')->type('h2')->prepend_content('Test ')->root;

OPERATORS

Mojo::Collection overloads the following operators.

bool

my $bool = !!$collection;

True or false, depending on if the collection is empty.

stringify

my $str = "$collection";

Stringify elements in collection and "join" them with newlines.

SEE ALSO

Mojolicious, Mojolicious::Guides, http://mojolicio.us.