Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-06-27 Thread Lars Dɪᴇᴄᴋᴏᴡ 迪拉斯
so I don't really see the point of adding extra decoding and encoding all over the place Because it's security relevant. By now the article http://perlmonks.org/?node_id=644786 should be well-known. Yes, this specific circumstance shown there is difficult to trigger and exploit. That's not the

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-11 Thread Will Crawford
While it's not Catalyst's fault, I've found over the years that interacting with underlying libraries, databases and legacy systems is generally easier when I *don't* try to force anything. I have custom code in place to deal with know sources of inconsistent encodings (check to see if it's valid

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-11 Thread Will Crawford
On 10 March 2013 19:58, Tomas Doran bobtf...@bobtfish.net wrote: Does anyone have a strong opinion on this being added to their app by default? Does anyone have an app which needs you to NOT load the unicode plugin? Speak now, or you're gonna have a bad time :) Think I kind of meant to

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-11 Thread John Napiorkowski
From: Bill Moseley mose...@hank.org To: The elegant MVC web framework catalyst@lists.scsys.co.uk Sent: Monday, March 11, 2013 11:48 AM Subject: Re: [Catalyst] Backlog for proposed changes in next Catalyst release On Mon, Mar 11, 2013 at 4:53 AM

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-10 Thread Tomas Doran
Turning it into a role and making it optionally be applied would be a nice to have (i.e. so people could turn it off if needed). It working seamlessly with apps which already use the (old) plugin is a *must* have (but to be fair - maybe we can just filter U::P::U::Encoding out of the plugin

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-10 Thread Peter Flanigan
On 10/03/13 19:58, Tomas Doran wrote: Does anyone have a strong opinion on this being added to their app by default? Does anyone have an app which needs you to NOT load the unicode plugin? Speak now, or you're gonna have a bad time :) My views already encode the response body if required. If

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-10 Thread Bill Moseley
On Sun, Mar 10, 2013 at 2:06 PM, Peter Flanigan p...@roxsoft.co.uk wrote: # Only touch 'text-like' contents return $c-next::method(@_) unless $c-response-content_type =~ /^text|xml$|javascript$/; smells bad, it will apply to text/x-json but not application/json The code

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-05 Thread John Napiorkowski
From: Bill Moseley mose...@hank.org To: John Napiorkowski jjn1...@yahoo.com; The elegant MVC web framework catalyst@lists.scsys.co.uk Sent: Tuesday, March 5, 2013 12:39 AM Subject: Re: [Catalyst] Backlog for proposed changes in next Catalyst release

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-05 Thread Bill Moseley
On Tue, Mar 5, 2013 at 7:09 AM, John Napiorkowski jjn1...@yahoo.com wrote: Bill, I think there's general agreement that the plugin is stable enough and right enough that it should represent core behavior. Although one of Catalyst's strengths has been to be un-opinionated and leave stuff to

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-05 Thread John Napiorkowski
From: Bill Moseley mose...@hank.org To: John Napiorkowski jjn1...@yahoo.com Cc: The elegant MVC web framework catalyst@lists.scsys.co.uk Sent: Tuesday, March 5, 2013 10:42 AM Subject: Re: [Catalyst] Backlog for proposed changes in next Catalyst release

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-04 Thread John Napiorkowski
@lists.scsys.co.uk Sent: Sunday, March 3, 2013 11:50 AM Subject: Re: [Catalyst] Backlog for proposed changes in next Catalyst release On Fri, Mar 1, 2013 at 9:38 AM, John Napiorkowski jjn1...@yahoo.com wrote: Hey All, http://jjnapiorkowski.typepad.com/modern-perl/2013/03/catalyst-backup-for-next

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-04 Thread Luis E. Muñoz
On Mar 4, 2013, at 11:12 AM, John Napiorkowski wrote: Bill, I'd be open to it, if it seems like we always just need to add this. I'm not enough an expert of unicode to understand the drawbacks, or why this was done as a plugin in the first place. Is there a drawback, for example to

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-04 Thread John Napiorkowski
- Original Message - From: Luis E. Muñoz luisemu...@gmail.com To: John Napiorkowski jjn1...@yahoo.com; The elegant MVC web framework catalyst@lists.scsys.co.uk Cc: Sent: Monday, March 4, 2013 11:38 AM Subject: Re: [Catalyst] Backlog for proposed changes in next Catalyst release On Mar 4

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-04 Thread Bill Moseley
On Mon, Mar 4, 2013 at 9:24 AM, John Napiorkowski jjn1...@yahoo.com wrote: http://play-perl.org/quest/5134cdc18e0a96450f38 There was a discussion about this on #catalyst-dev and in general people seem to think its ok. Bill, are you up to giving the work a try? I'd be happy to mentor

Re: [Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-03 Thread Bill Moseley
On Fri, Mar 1, 2013 at 9:38 AM, John Napiorkowski jjn1...@yahoo.com wrote: Hey All, http://jjnapiorkowski.typepad.com/modern-perl/2013/03/catalyst-backup-for-next-release-on-play-perl.html This is over on play Perl (http://play-perl.org/player/jnap) for your comments and votes. Hope to

[Catalyst] Backlog for proposed changes in next Catalyst release

2013-03-01 Thread John Napiorkowski
Hey All, http://jjnapiorkowski.typepad.com/modern-perl/2013/03/catalyst-backup-for-next-release-on-play-perl.html This is over on play Perl (http://play-perl.org/player/jnap) for your comments and votes.  Hope to see you there! John ___ List: