Mojolicious 8.57
Security Advisories
Mojo::DOM did not correctly parse <script> tags.
- https://github.com/mojolicious/mojo/commit/6f195d85db6756022d3599f7d2634975688c9550
- https://github.com/mojolicious/mojo/issues/2014
- https://github.com/mojolicious/mojo/issues/2015
Fixed version: >=9.31
Reported: 2022-12-10
Small sessions could be used as part of a brute-force attack to decode the session secret.
Reported: 2021-06-01
CVE-2021-47208
A bug in format detection can potentially be exploited for a DoS attack.
- https://github.com/mojolicious/mojo/issues/1736
- https://github.com/mojolicious/mojo/commit/a0c4576ffb11c235088550de9ba7ac4196e1953c
Reported: 2021-03-16
CVE-2020-36829
Mojo::Util secure_compare can leak the string length. By immediately returning when the two strings are not the same length, the function allows an attacker to guess the length of the secret string using timing attacks.
Reported: 2020-11-10
Kwalitee Issues
- prereq_matches_use
-
List all used modules in META.yml requires
Error:
- EV
- meta_yml_has_provides
-
Add all modules contained in this distribution to the META.yml field 'provides'. Module::Build or Dist::Zilla::Plugin::MetaProvides do this automatically for you.
Modules
Name | Abstract | Version | View |
---|---|---|---|
Mojo | Web development toolkit | metacpan | |
Mojo::Asset | HTTP content storage base class | metacpan | |
Mojo::Asset::File | File storage for HTTP content | metacpan | |
Mojo::Asset::Memory | In-memory storage for HTTP content | metacpan | |
Mojo::Base | Minimal base class for Mojo projects | metacpan | |
Mojo::ByteStream | ByteStream | metacpan | |
Mojo::Cache | Naive in-memory cache | metacpan | |
Mojo::Collection | Collection | metacpan | |
Mojo::Content | HTTP content base class | metacpan | |
Mojo::Content::MultiPart | HTTP multipart content | metacpan | |
Mojo::Content::Single | HTTP content | metacpan | |
Mojo::Cookie | HTTP cookie base class | metacpan | |
Mojo::Cookie::Request | HTTP request cookie | metacpan | |
Mojo::Cookie::Response | HTTP response cookie | metacpan | |
Mojo::DOM | Minimalistic HTML/XML DOM parser with CSS selectors | metacpan | |
Mojo::DOM::CSS | CSS selector engine | metacpan | |
Mojo::DOM::HTML | HTML/XML engine | metacpan | |
Mojo::Date | HTTP date | metacpan | |
Mojo::DynamicMethods | Fast dynamic method dispatch | metacpan | |
Mojo::EventEmitter | Event emitter base class | metacpan | |
Mojo::Exception | Exception base class | metacpan | |
Mojo::File | File system paths | metacpan | |
Mojo::Headers | HTTP headers | metacpan | |
Mojo::HelloWorld | Hello World! | metacpan | |
Mojo::Home | Home sweet home | metacpan | |
Mojo::IOLoop | Minimalistic event loop | metacpan | |
Mojo::IOLoop::Client | Non-blocking TCP/IP and UNIX domain socket client | metacpan | |
Mojo::IOLoop::Delay | Promises/A+ and flow-control helpers | metacpan | |
Mojo::IOLoop::Server | Non-blocking TCP and UNIX domain socket server | metacpan | |
Mojo::IOLoop::Stream | Non-blocking I/O stream | metacpan | |
Mojo::IOLoop::Subprocess | Subprocesses | metacpan | |
Mojo::IOLoop::TLS | Non-blocking TLS handshake | metacpan | |
Mojo::JSON | Minimalistic JSON | metacpan | |
Mojo::JSON::Pointer | JSON Pointers | metacpan | |
Mojo::Loader | Load all kinds of things | metacpan | |
Mojo::Log | Simple logger | metacpan | |
Mojo::Message | HTTP message base class | metacpan | |
Mojo::Message::Request | HTTP request | metacpan | |
Mojo::Message::Response | HTTP response | metacpan | |
Mojo::Parameters | Parameters | metacpan | |
Mojo::Path | Path | metacpan | |
Mojo::Promise | Promises/A+ | metacpan | |
Mojo::Reactor | Low-level event reactor base class | metacpan | |
Mojo::Reactor::EV | Low-level event reactor with libev support | metacpan | |
Mojo::Reactor::Poll | Low-level event reactor with poll support | metacpan | |
Mojo::Server | HTTP/WebSocket server base class | metacpan | |
Mojo::Server::CGI | CGI server | metacpan | |
Mojo::Server::Daemon | Non-blocking I/O HTTP and WebSocket server | metacpan | |
Mojo::Server::Hypnotoad | A production web serv...ALL GLORY TO THE HYPNOTOAD! | metacpan | |
Mojo::Server::Morbo | Tonight at 11...DOOOOOOOOOOOOOOOM! | metacpan | |
Mojo::Server::Morbo::Backend | Morbo backend base class | metacpan | |
Mojo::Server::Morbo::Backend::Poll | Morbo default backend | metacpan | |
Mojo::Server::PSGI | PSGI server | metacpan | |
Mojo::Server::Prefork | Pre-forking non-blocking I/O HTTP and WebSocket server | metacpan | |
Mojo::Template | Perl-ish templates | metacpan | |
Mojo::Transaction | Transaction base class | metacpan | |
Mojo::Transaction::HTTP | HTTP transaction | metacpan | |
Mojo::Transaction::WebSocket | WebSocket transaction | metacpan | |
Mojo::URL | Uniform Resource Locator | metacpan | |
Mojo::Upload | Upload | metacpan | |
Mojo::UserAgent | Non-blocking I/O HTTP and WebSocket user agent | metacpan | |
Mojo::UserAgent::CookieJar | Cookie jar for HTTP user agents | metacpan | |
Mojo::UserAgent::Proxy | User agent proxy manager | metacpan | |
Mojo::UserAgent::Server | Application server | metacpan | |
Mojo::UserAgent::Transactor | User agent transactor | metacpan | |
Mojo::Util | Portable utility functions | metacpan | |
Mojo::WebSocket | The WebSocket protocol | metacpan | |
Mojolicious | Real-time web framework | 8.57 | metacpan |
Mojolicious::Command | Command base class | metacpan | |
Mojolicious::Command::Author::cpanify | CPAN-ify command | metacpan | |
Mojolicious::Command::Author::generate | Generator command | metacpan | |
Mojolicious::Command::Author::generate::app | App generator command | metacpan | |
Mojolicious::Command::Author::generate::lite_app | Lite app generator command | metacpan | |
Mojolicious::Command::Author::generate::makefile | Makefile generator command | metacpan | |
Mojolicious::Command::Author::generate::plugin | Plugin generator command | metacpan | |
Mojolicious::Command::Author::inflate | Inflate command | metacpan | |
Mojolicious::Command::cgi | CGI command | metacpan | |
Mojolicious::Command::daemon | Daemon command | metacpan | |
Mojolicious::Command::eval | Eval command | metacpan | |
Mojolicious::Command::get | Get command | metacpan | |
Mojolicious::Command::prefork | Pre-fork command | metacpan | |
Mojolicious::Command::psgi | PSGI command | metacpan | |
Mojolicious::Command::routes | Routes command | metacpan | |
Mojolicious::Command::version | Version command | metacpan | |
Mojolicious::Commands | Command line interface | metacpan | |
Mojolicious::Controller | Controller base class | metacpan | |
Mojolicious::Lite | Micro real-time web framework | metacpan | |
Mojolicious::Plugin | Plugin base class | metacpan | |
Mojolicious::Plugin::Config | Perl-ish configuration plugin | metacpan | |
Mojolicious::Plugin::DefaultHelpers | Default helpers plugin | metacpan | |
Mojolicious::Plugin::EPLRenderer | Embedded Perl Lite renderer plugin | metacpan | |
Mojolicious::Plugin::EPRenderer | Embedded Perl renderer plugin | metacpan | |
Mojolicious::Plugin::HeaderCondition | Header condition plugin | metacpan | |
Mojolicious::Plugin::JSONConfig | JSON configuration plugin | metacpan | |
Mojolicious::Plugin::Mount | Application mount plugin | metacpan | |
Mojolicious::Plugin::NotYAMLConfig | Not quite YAML configuration plugin | metacpan | |
Mojolicious::Plugin::TagHelpers | Tag helpers plugin | metacpan | |
Mojolicious::Plugins | Plugin manager | metacpan | |
Mojolicious::Renderer | Generate dynamic content | metacpan | |
Mojolicious::Routes | Always find your destination with routes | metacpan | |
Mojolicious::Routes::Match | Find routes | metacpan | |
Mojolicious::Routes::Pattern | Route pattern | metacpan | |
Mojolicious::Routes::Route | Route | metacpan | |
Mojolicious::Sessions | Session manager based on signed cookies | metacpan | |
Mojolicious::Static | Serve static files | metacpan | |
Mojolicious::Types | MIME types | metacpan | |
Mojolicious::Validator | Validate values | metacpan | |
Mojolicious::Validator::Validation | Perform validations | metacpan | |
Test::Mojo | Testing Mojo | metacpan | |
ojo | Fun one-liners with Mojo | metacpan |