Security Advisories (2)
CVE-2012-5572 (2014-05-30)

CRLF injection vulnerability in the cookie method allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via a cookie name.

CVE-2011-1589 (2011-04-05)

Directory traversal vulnerability (Mojolicious report, but Dancer was vulnerable as well).

NAME Dancer::Log::LogHandler - Log::Handler wrapper for Dancer

DESCRIPTION

This class is an interface between Dancer's logging engine abstraction layer and the Log::Handler module.

In order to use this engine, set the following setting as follow:

logger: 'log_handler'

This can be done in your config.yml file or directly in your app code with the set keyword

The default configuration of this module is to write log message on STDERR. You can change this behavior by adding a similar configuration:

log_handler:
  file:
    filename: debug.log
    maxlevel: debug
    minlevel: warning
  screen:
    log_to: "STDERR"
    maxlevel: debug
    minlevel: warning

SEE ALSO

Dancer, Log::Handler

AUTHOR

This module has been written by Franck Cuny

LICENSE

This module is free software and is released under the same terms as Perl itself.