Skip Menu |

This queue is for tickets about the HTML-FormFu CPAN distribution.

Report information
The Basics
Id: 106868
Status: resolved
Priority: 0/
Queue: HTML-FormFu

People
Owner: Nobody in particular
Requestors: SREZIC [...] cpan.org
Cc:
AdminCc:

Bug Information
Severity: (no value)
Broken in: 2.01
Fixed in: 2.02



Subject: CGI::param called in list context
Running the test suite produces a number of warnings in the form: CGI::param called in list context from /tmpfs/.cpan-build/2015090200/HTML-FormFu-2.01-M90Xvb/blib/lib/HTML/FormFu.pm line 317, this can lead to vulnerabilities. See the warning in "Fetching the value or values of a single named parameter" at /opt/perl-5.20.3-RC2/lib/site_perl/5.20.3/CGI.pm line 404. Probably you should check if there's really a context problem here, or if not, use the new multi_param method. To be compatible with older CGI, you could do it like this: my @foo = $q->can('multi_param') ? $q->multi_param('key') : $q->param('key'); (Or likewise using defined &CGI::multi_param if you're using the non-OO interface)
Fix was put in to suppress warnings - https://github.com/fireartist/HTML-FormFu/commit/ee79cf689f075f8a64d96a5e467875242caa9078 This was in release 2.02