-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Ehask wrote:
>    I inherited an application that uses Mason on RHEL with apache.
> 
>  package HTML::Mason::Plugin::PreventCrossSite;
> use base qw(HTML::Mason::Plugin);
> 
> sub start_request_hook {
>    my $self = shift;
>    my $context = shift;
>    my @clean_args;
>    foreach my $arg (@{ $context->args } ) {
>        $arg =~ s/[\<\>\"\'\%\;\)\(\&\+]//g;
>        push @clean_args, $arg;
>    }
>    @{$context->args} = @clean_args;
>  }
>  1;
IMHO, ugly legacy (dumb RegExp, clumsy code, wrong approach) ;-/


> How do I enable this plugin? Do I place a new file in the plugin directory? 
> Soon I will also have to move this app to a new version of apache as it also
> failed the PCI scan.
http://www.masonhq.com/docs/manual/Params.html#plugins

In other words, please (at least) search http://www.masonhq.com/
_before_ asking. You will have better questions/answers ;-)

- --
Marius Feraru
-----BEGIN PGP SIGNATURE-----

iD8DBQFE1InNtZHp/AYZiNkRAkwWAKCCEqiVcXZ5/TfcwbS7vtezNtH0wwCgoLSl
/zrEW6vxWkTZuKV8l+M63MU=
=beae
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Mason-users mailing list
Mason-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/mason-users

Reply via email to