/ 
Jifty-1.01209
/ Jifty::Plugin::Config::View
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Plugin::Config::View - Templates for Config plugin

DESCRIPTION

This provides two views for the configuration plugin.

/__jifty/config

This path (configurable by the config_url setting of the plugin) shows the Jifty::Plugin::Config::Action::Config action.

/__jifty/config/restart.html

This path (configurable by the restart_url setting of the plugin) waits five seconds, then redirects to the configured after_restart_url.