-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Ehask wrote: > I inherited an application that uses Mason on RHEL with apache. > > package HTML::Mason::Plugin::PreventCrossSite; > use base qw(HTML::Mason::Plugin); > > sub start_request_hook { > my $self = shift; > my $context = shift; > my @clean_args; > foreach my $arg (@{ $context->args } ) { > $arg =~ s/[\<\>\"\'\%\;\)\(\&\+]//g; > push @clean_args, $arg; > } > @{$context->args} = @clean_args; > } > 1; IMHO, ugly legacy (dumb RegExp, clumsy code, wrong approach) ;-/
> How do I enable this plugin? Do I place a new file in the plugin directory? > Soon I will also have to move this app to a new version of apache as it also > failed the PCI scan. http://www.masonhq.com/docs/manual/Params.html#plugins In other words, please (at least) search http://www.masonhq.com/ _before_ asking. You will have better questions/answers ;-) - -- Marius Feraru -----BEGIN PGP SIGNATURE----- iD8DBQFE1InNtZHp/AYZiNkRAkwWAKCCEqiVcXZ5/TfcwbS7vtezNtH0wwCgoLSl /zrEW6vxWkTZuKV8l+M63MU= =beae -----END PGP SIGNATURE----- ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys -- and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Mason-users mailing list Mason-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/mason-users