Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Plugin::Compat - Provide Jifty API compatibility

SYNOPSIS

# In your jifty config.yml under the framework section:

Plugins:
  - Compat: {}

DESCRIPTION

This plugin provides Jifty API compatibility.

ConfigVersion VERSION 5

Provides Jifty::Handler->apache for apps prior to ConfigFileVersion 5.

TODO: this should also rebind STDIN/STDOUT in the per-request hook.

METHODS

wrap APP

Wraps the provided Plack app in the compatibility layer. You'll never need to call this yourself.