/ 
Jifty-1.10228
/ Jifty::Plugin::Authentication::Password::Action::SendAccountConfirmation
Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Plugin::Authentication::Password::Action::SendAccountConfirmation - send confirmation for an email

arguments

The field for ResendConfirmation is:

address: the email address

setup

Create an empty user object to work with

validate_address

Make sure their email address is an unconfirmed user.

take_action

Create a new unconfirmed user and send out a confirmation email.