/ 
Jifty-1.01209
/ Jifty::Web::Form::Field::Collection
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Web::Form::Field::Collection - render a whole collection of available values

DESCRIPTION

Renders multiple text inputs with the same name, available_values used as defaults.

METHODS

render_widget

Renders the whole collection of available values.

render_label

Render a label for our own. We need to output the label as a span instead since the labels are associated with the individual options.

render_option option

Renders a normal input field.