[Catalyst] question about :Args

E R pc88mxer at gmail.com
Mon Sep 13 18:22:57 GMT 2010


Hi,

I have some questions about this sub declaration:

sub view :Path :Args(1) {
    my ( $self, $c, $page_name ) = @_;
    $c->stash->{template} = "help/$page_name.tt2";
}


1. Is there anything inherently unsafe about this sub declaration?
Should any security checks be made against $page_name?

2. What kind of a string will $page_name be, an octet sequence or a
code-point sequence? Will it ever be possible for $page_name to
contain characters with ordinal value > 255?

Thanks!
ER



More information about the Catalyst mailing list