Security Advisories (1)
CPANSA-Dancer2-2018-01 (2018-01-30)

There is a potential RCE with regards to Storable. We have added session ID validation to the session engine so that session backends based on Storable can reject malformed session IDs that may lead to exploitation of the RCE.

NAME

Dancer2::Template::Simple - Pure Perl 5 template engine for Dancer2

VERSION

version 0.05

DESCRIPTION

This template engine is provided as a default one for the Dancer2 micro framework.

This template engine should be fine for development purposes but is not a powerful one, it's written in pure Perl and has no C bindings to accelerate the template processing.

If you want to power an application with Dancer2 in production environment, it's strongly advised to switch to Dancer2::Template::TemplateToolkit.

SYNTAX

A template written for Dancer2::Template::Simple should be working just fine with Dancer2::Template::TemplateToolkit. The opposite is not true though.

variables

To interpolate a variable in the template, use the following syntax:

<% var1 %>

If 'var1' exists in the tokens hash given, its value will be written there.

SEE ALSO

Dancer2, Dancer2::Template

AUTHOR

Dancer Core Developers

COPYRIGHT AND LICENSE

This software is copyright (c) 2013 by Alexis Sukrieh.

This is free software; you can redistribute it and/or modify it under the same terms as the Perl 5 programming language system itself.