/ 
Jifty-1.01209
/ Jifty::Plugin::Config::Action::AddConfig
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Plugin::Config::Action::AddConfig - add a configuration entry

METHODS

contextualize

Takes a context string (slash-separated list of keys) and returns a pair of hash-references: the "top" of the config (for merging) and the "current pointer" into the "top" hashref for where the new config entry should go.

write_new_config

Merges the existing config file at target_file with the new entry and updates target_file.

take_action

Sets field = value at context in target_file.