[libhtml-mason-perl] 11/16: Let debcherry refresh patches, drop 03_cgi_param_disable_list_context_warning.patch (applied upstream)

Florian Schlichting fsfs at moszumanska.debian.org
Tue Aug 18 20:04:08 UTC 2015


This is an automated email from the git hooks/post-receive script.

fsfs pushed a commit to branch master
in repository libhtml-mason-perl.

commit 700ccf85e0b39490761cc29124f80376c6967b0e
Author: Florian Schlichting <fsfs at debian.org>
Date:   Tue Aug 18 17:54:08 2015 +0200

    Let debcherry refresh patches, drop 03_cgi_param_disable_list_context_warning.patch (applied upstream)
---
 debian/patches/02_cgihandler.patch                 |  2 +-
 ...03_cgi_param_disable_list_context_warning.patch | 35 ----------------------
 debian/patches/series                              |  1 -
 3 files changed, 1 insertion(+), 37 deletions(-)

diff --git a/debian/patches/02_cgihandler.patch b/debian/patches/02_cgihandler.patch
index bc06ca1..4784c63 100644
--- a/debian/patches/02_cgihandler.patch
+++ b/debian/patches/02_cgihandler.patch
@@ -13,7 +13,7 @@ Patch-Name: 02_cgihandler.patch
 diff --git a/lib/HTML/Mason/CGIHandler.pm b/lib/HTML/Mason/CGIHandler.pm
 --- a/lib/HTML/Mason/CGIHandler.pm
 +++ b/lib/HTML/Mason/CGIHandler.pm
-@@ -97,6 +97,9 @@ sub _handler {
+@@ -86,6 +86,9 @@ sub _handler {
                  $sent_headers = 1;
              }
  
diff --git a/debian/patches/03_cgi_param_disable_list_context_warning.patch b/debian/patches/03_cgi_param_disable_list_context_warning.patch
deleted file mode 100644
index c56e933..0000000
--- a/debian/patches/03_cgi_param_disable_list_context_warning.patch
+++ /dev/null
@@ -1,35 +0,0 @@
-From: Kevin Falcone <falcone at bestpractical.com>
-Date: Wed, 15 Oct 2014 15:28:09 -0400
-Subject: [PATCH] Ask CGI to not warn about param() in list context.
-
-Mason protects from the class of param() bugs which allow users to sneak in
-arguments as described here:
-http://blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications/
-
-Since CGI.pm 4.05 the only way to quiet this warning is by setting their
-variable as documented here
-https://metacpan.org/pod/CGI#Fetching-the-value-or-values-of-a-single-named-parameter
-
-Mason has always allowed foo=1&foo=2 to end up available in a template
-as @foo = (1,2) so retain backcompat.
-
-Bug: https://rt.cpan.org/Public/Bug/Display.html?id=99520
-Origin: https://rt.cpan.org/Public/Bug/Display.html?id=99520
-Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765477
-Patch-Name: 03_cgi_param_disable_list_context_warning.patch
----
-
- lib/HTML/Mason/Utils.pm | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/lib/HTML/Mason/Utils.pm b/lib/HTML/Mason/Utils.pm
---- a/lib/HTML/Mason/Utils.pm
-+++ b/lib/HTML/Mason/Utils.pm
-@@ -45,6 +45,7 @@ sub cgi_request_args
- 
-     foreach my $key ( map { $q->$_() } @methods ) {
-         next if exists $args{$key};
-+        local $CGI::LIST_CONTEXT_WARN = 0;
-         my @values = map { $q->$_($key) } @methods;
-         $args{$key} = @values == 1 ? $values[0] : \@values;
-     }
diff --git a/debian/patches/series b/debian/patches/series
index 6a2ad13..f6c0770 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,4 +1,3 @@
 # exported from git by git-debcherry
 01_apachehandler.patch
 02_cgihandler.patch
-03_cgi_param_disable_list_context_warning.patch

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libhtml-mason-perl.git



More information about the Pkg-perl-cvs-commits mailing list