Subject: | Using with CGI version >= 4 causes error |
Date: | Mon, 15 Dec 2014 14:04:08 +0000 |
To: | bug-HTML-FillInForm [...] rt.cpan.org |
From: | Gareth Tunley <gjtunley [...] gmail.com> |
When module is used with CGI version 4 or above the following warning is
thrown:
CGI::param called in list context from package HTML::FillInForm line 427,
this can lead to vulnerabilities. See the warning in "Fetching the value or
values of a single named parameter" at /usr/local/share/perl/5.14.2/CGI.pm
line 437.
I fixed by changing this to:
my @v;
if ($o->can('multi_param')) {
@v = $o->multi_param($param);
} else {
@v = $o->param($param);
}
Though YMMV.
Gareth
--
Gareth Tunley - gjtunley@gmail.com