Security Advisories (1)
CVE-2025-30673 (2025-04-01)

Sub::HandlesVia for Perl before 0.050002 allows untrusted code from the current working directory ('.') to be loaded similar to CVE-2016-1238. If an attacker can place a malicious file in current working directory, it may be loaded instead of the intended file, potentially leading to arbitrary code execution. Sub::HandlesVia uses Mite to produce the affected code section due to CVE-2025-30672

NAME

Sub::HandlesVia::HandlerLibrary::Blessed - library of object-related methods

SYNOPSIS

package My::Class {
  use Moo;
  use Sub::HandlesVia;
  use Types::Standard 'Object';
  use HTTP::Tiny;
  has http_ua => (
    is => 'rwp',
    isa => Object,
    handles_via => 'Blessed',
    handles => {
      'http_get'  => 'get',
      'http_post' => 'post',
    },
    default => sub { HTTP::Tiny->new },
  );
}

DESCRIPTION

This is a library of methods for Sub::HandlesVia.

DELEGATABLE METHODS

Unlike the other libraries supplied by Sub::HandlesVia, this library allows you to delegate to any method name.

It assumes that the attribute value is a blessed object, and calls the correspondingly named method on it.

Moo, Moose, Mouse, and Mite all have this kind of delegation built-in anyway, but this module allows you to perform the delegation using Sub::HandlesVia. This may be useful for Object::Pad and Class::Tiny, which don't have a built-in delegation feature.

BUGS

Please report any bugs to https://github.com/tobyink/p5-sub-handlesvia/issues.

SEE ALSO

Sub::HandlesVia.

AUTHOR

Toby Inkster <tobyink@cpan.org>.

COPYRIGHT AND LICENCE

This software is copyright (c) 2022 by Toby Inkster.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.

DISCLAIMER OF WARRANTIES

THIS PACKAGE IS PROVIDED "AS IS" AND WITHOUT ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTIBILITY AND FITNESS FOR A PARTICULAR PURPOSE.