Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Plugin::Authentication::Password::Action::Signup - signup for an account

arguments

The fields for Signup are:

email: the email address
password and password_confirm: the requested password
name: your full name

validate_email

Make sure their email address looks sane

take_action

Overrides the virtual take_action method on Jifty::Action to call the appropriate Jifty::Record's create method when the action is run, thus creating a new object in the database.

Makes sure that the user only specifies things we want them to.