Security Advisories (1)
CPANSA-Dancer2-2018-01 (2018-01-30)

There is a potential RCE with regards to Storable. We have added session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE.

NAME

Dancer2::Template::TemplateToolkit - Template toolkit engine for Dancer2

VERSION

version 0.13

SYNOPSIS

To use this engine, you may configure Dancer2 via config.yaml:

template:   "template_toolkit"

Or you may also change the rendering engine on a per-route basis by setting it manually with set:

# code code code
set template => 'template_toolkit';

DESCRIPTION

This template engine allows you to use Template::Toolkit in Dancer2.

METHODS

render($template, \%tokens)

Renders the template. The first arg is a filename for the template file or a reference to a string that contains the template. The second arg is a hashref for the tokens that you wish to pass to Template::Toolkit for rendering.

SEE ALSO

Dancer2, Dancer2::Core::Role::Template, Template::Toolkit.

AUTHOR

Dancer Core Developers

COPYRIGHT AND LICENSE

This software is copyright (c) 2014 by Alexis Sukrieh.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.