Security Advisories (1)
CPANSA-Jifty-2011-01 (2011-03-17)

The path as passed in the fragment request data structure was used verbatim in the dispatcher and other locations. This possibly allowed requests to walk around ACLs by requesting '/some/safe/place/../../../dangerous' as a fragment.

NAME

Jifty::Plugin::Config - Add configuration editor

SYNOPSIS

# In your jifty config.yml under the framework section:

Plugins:
  - Config:
      after_restart_url: '/'
      wait_seconds: 5
      config_url: '/__jifty/config'
      restart_url: '/__jifty/config/restart.html'
      nav_menu: 1

DESCRIPTION

This plugin lets you update etc/config.yml in web page.

METHODS

init

set after_restart_url, wait_seconds and config_url, default is '/', 5 and '/__jifty/config', respectively after_restart_url is the url where we will redirect to after restart wait_seconds are the seconds that we wait for before redirecting config_url is the url where we will update the config restart_url is the url where we actually do the restart, with a wait page setting nav_menu to 0 will stop this plugin from adding anything to your application's navigation menu