/ 
Jifty-1.10228
/ Jifty::Action::AboutMe
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Action::AboutMe - Give information about the current user

DESCRIPTION

This action is used for external consumers of Jifty's various APIs to get information about the current user.

take_action

Does nothing except set the results to the Jifty::CurrentUser object.

SEE ALSO

Jifty::Action, Jifty::CurrentUser

LICENSE

Jifty is Copyright 2005-2010 Best Practical Solutions, LLC. Jifty is distributed under the same terms as Perl itself.