[libhtml-mason-perl] 11/16: Let debcherry refresh patches, drop 03_cgi_param_disable_list_context_warning.patch (applied upstream)
Florian Schlichting
fsfs at moszumanska.debian.org
Tue Aug 18 20:04:08 UTC 2015
This is an automated email from the git hooks/post-receive script.
fsfs pushed a commit to branch master
in repository libhtml-mason-perl.
commit 700ccf85e0b39490761cc29124f80376c6967b0e
Author: Florian Schlichting <fsfs at debian.org>
Date: Tue Aug 18 17:54:08 2015 +0200
Let debcherry refresh patches, drop 03_cgi_param_disable_list_context_warning.patch (applied upstream)
---
debian/patches/02_cgihandler.patch | 2 +-
...03_cgi_param_disable_list_context_warning.patch | 35 ----------------------
debian/patches/series | 1 -
3 files changed, 1 insertion(+), 37 deletions(-)
diff --git a/debian/patches/02_cgihandler.patch b/debian/patches/02_cgihandler.patch
index bc06ca1..4784c63 100644
--- a/debian/patches/02_cgihandler.patch
+++ b/debian/patches/02_cgihandler.patch
@@ -13,7 +13,7 @@ Patch-Name: 02_cgihandler.patch
diff --git a/lib/HTML/Mason/CGIHandler.pm b/lib/HTML/Mason/CGIHandler.pm
--- a/lib/HTML/Mason/CGIHandler.pm
+++ b/lib/HTML/Mason/CGIHandler.pm
-@@ -97,6 +97,9 @@ sub _handler {
+@@ -86,6 +86,9 @@ sub _handler {
$sent_headers = 1;
}
diff --git a/debian/patches/03_cgi_param_disable_list_context_warning.patch b/debian/patches/03_cgi_param_disable_list_context_warning.patch
deleted file mode 100644
index c56e933..0000000
--- a/debian/patches/03_cgi_param_disable_list_context_warning.patch
+++ /dev/null
@@ -1,35 +0,0 @@
-From: Kevin Falcone <falcone at bestpractical.com>
-Date: Wed, 15 Oct 2014 15:28:09 -0400
-Subject: [PATCH] Ask CGI to not warn about param() in list context.
-
-Mason protects from the class of param() bugs which allow users to sneak in
-arguments as described here:
-http://blog.gerv.net/2014/10/new-class-of-vulnerability-in-perl-web-applications/
-
-Since CGI.pm 4.05 the only way to quiet this warning is by setting their
-variable as documented here
-https://metacpan.org/pod/CGI#Fetching-the-value-or-values-of-a-single-named-parameter
-
-Mason has always allowed foo=1&foo=2 to end up available in a template
-as @foo = (1,2) so retain backcompat.
-
-Bug: https://rt.cpan.org/Public/Bug/Display.html?id=99520
-Origin: https://rt.cpan.org/Public/Bug/Display.html?id=99520
-Bug-Debian: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=765477
-Patch-Name: 03_cgi_param_disable_list_context_warning.patch
----
-
- lib/HTML/Mason/Utils.pm | 1 +
- 1 file changed, 1 insertion(+)
-
-diff --git a/lib/HTML/Mason/Utils.pm b/lib/HTML/Mason/Utils.pm
---- a/lib/HTML/Mason/Utils.pm
-+++ b/lib/HTML/Mason/Utils.pm
-@@ -45,6 +45,7 @@ sub cgi_request_args
-
- foreach my $key ( map { $q->$_() } @methods ) {
- next if exists $args{$key};
-+ local $CGI::LIST_CONTEXT_WARN = 0;
- my @values = map { $q->$_($key) } @methods;
- $args{$key} = @values == 1 ? $values[0] : \@values;
- }
diff --git a/debian/patches/series b/debian/patches/series
index 6a2ad13..f6c0770 100644
--- a/debian/patches/series
+++ b/debian/patches/series
@@ -1,4 +1,3 @@
# exported from git by git-debcherry
01_apachehandler.patch
02_cgihandler.patch
-03_cgi_param_disable_list_context_warning.patch
--
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-perl/packages/libhtml-mason-perl.git
More information about the Pkg-perl-cvs-commits
mailing list