April 2010 - dancer-users - lists.preshweb.co.uk

Re: [Dancer-users] Dancer: allow multiple folders for Template's INCLUDE_PATH
by Alexis Sukrieh 30 Apr '10

30 Apr '10

[CC'ing the list / please, send this kind of messages to the list next times, thanks] Stéphane a écrit : > It would be nice to be able to specify multiple folders for > setting('views'), but that would require some extensive changes > (changing template() is simple enough, but a lot of spots in Dancer's > code assume 'views' is a scalar, not an array). Well, this doesn't fit the convetions Dancer is based on, I'm not sure why you want to do that (you can still create multiple directories inside the 'views' dir). > Would it be possible however to allow Template's INCLUDE_PATH to be > specified in the regular manner (using the "template_toolkit" engine > YAML configuration) and Dancer's default path to be pre-pended? Yes, this is a good idea, more generally, any TT config given in the configuration should be used prior to Dancer's defaults. > E.g. replace > > $tt_config->{INCLUDE_PATH} = setting('views'); > > in Dancer::Template::TemplateToolkit with: > > if($tt_config->{INCLUDE_PATH}) { > if(ref($tt_config->{INCLUDE_PATH}) eq 'ARRAY') { > unshift @{$tt_config->{INCLUDE_PATH}}, setting('views'); > } else { > $tt_config->{INCLUDE_PATH} = > [setting('views'),$tt_config->{INCLUDE_PATH}]; > } > } else { > $tt_config->{INCLUDE_PATH} = setting('views'); > } Hmm, no. There are different things you're talking about there: 1. the setting "views" which you want to be an ARRAY instead of a SCALAR. 2. the facility of changing TT's INCLUDE_PATH setting. I disagree with (1) for the reasons explained above. I agree with (2) but the user should be warned in some way that he might break something. Anyways, it's a sane idea to let them change whatever TT config they want via Dancer's engine config. If the user change the INCLUDE_PATH setting and don't include the "views" directory On the other hand, the "views" setting should remain a scalar to me, as this is one of Dancer's conventions: "views are located in a directory". > (I'm assuming that the paths will be specified in a YAML array if there > are more than one.) > > Again probably not a feature a lot of people are looking for, especially > if they deploy only once, but this allows me to separate generic views > from views that apply to a specific installation. To conclude, I think you should fill an issue report like "propagate all TT config entries from Dancer's configuration to TT's" so we can track the work on this more easily. Regards, -- Alexis Sukrieh

2 1

Problems loading an app
by Juan J. Martínez 27 Apr '10

27 Apr '10

Hello, Since I moved to the "load_app 'whatever';" scheme I've found that not all the errors are reported in the same way. When you try to run the application, sometimes you only get: unable to load application whatever at ../local/Dancer.pm line 155. I don't know if I'm doing something wrong, but it depends on the error: Example: missing a ; Bareword found where operator expected at path/lib/whatever.pm line 64, near "redirect" (Missing semicolon on previous line?) unable to load application whatever at ../local/Dancer.pm line 155. BUT, something like ($w doesn't exist): print "uh" if $user =~ m/$w/; Shows only the 'unable to load' message, but with "use whatever.pm" you get a more verbose message: Global symbol "$w" requires explicit package name at path/lib/whatever.pm line 62. Compilation failed in require at ./whatever.pl line 7. BEGIN failed--compilation aborted at ./whatever.pl line 7. Regards, Juanjo -- jjm's home: http://www.usebox.net/jjm/ blackshell: http://blackshell.usebox.net/ ramble on: http://rambleon.usebox.net/

3 11

Re: [Dancer-users] Dancer.pm sets confdir too early
by Alexis Sukrieh 26 Apr '10

26 Apr '10

[ CC'ing the list ] Le lundi 26 avril 2010 à 15:50 +0200, Stéphane a écrit : > In latest git, Dancer.pm at line 148 does: > > setting confdir => $ENV{DANCER_CONFDIR} || setting('appdir'); > > however this overrides what Dancer::Config->load() (especially this > means init_confdir() never get a chance to run). > > > Basically I'd like to be able to do: > > use Dancer ':syntax'; > set confdir => MyApp::confdir; # e.g. /etc/myapp/config.yml > use Dancer; > > but currently this gets overriden by Dancer->import(). No, you can't do that. It has never been possible to set the confdir via the "set" keyword as Dancer needs to parse configuration files at import time. The only supported way for using a separate confdir is to use the DANCER_CONFDIR environment variable. If you're running with the standalone server, just run it like: $ DANCER_CONFDIR=/etc/myapp ./server.pl ... Or under Apache, use SetEnv to set DANCER_CONFDIR. Changing that specific setting within the application code is not possible because if we allow that, we can't parse the configuration at load time. Regards, -- Alexis Sukrieh

2 3

problem sending mail
by Naveed Massjouni 21 Apr '10

21 Apr '10

When I try to send mail from within a route, I get: error when closing pipe to sendmail: No child processes Trace begun at /usr/local/share/perl/5.10.0/Email/Sender/Transport/Sendmail.pm line 77 On line 77 of Sendmail.pm it is just closing a file handle: close $pipe or Email::Sender::Failure->throw("error when closing pipe to sendmail: $!"); The code I wrote that sends the mail is very simple and works from a standalone script: use Email::Sender::Simple; use Email::Simple; Email::Sender::Simple->send(Email::Simple->create( header => [ To => $to, From => $from, Subject => $subject, ], body => $body, )); I was just wondering if this was a bug in Dancer or if I'm doing something wrong. Thanks, Naveed

2 2

New plugins & template engine (Dancer::Plugin::Database, Dancer::Plugin::SiteMap, Dancer::Template::HtmlTemplate)
by David Precious 19 Apr '10

19 Apr '10

Hi all, Just a little heads-up to two new Dancer plugins released recently: Dancer::Plugin::Database - to make using database connections from Dancer apps nice and easy Dancer::Plugin::SiteMap - to produce sitemaps automatically And also a new template engine supported: Dancer::Template::HtmlTemplate, for using HTML::Template from Dancer apps. Cheers Dave P (bigpresh) -- David Precious <davidp(a)preshweb.co.uk> http://blog.preshweb.co.uk/ www.preshweb.co.uk/twitter www.preshweb.co.uk/linkedin www.preshweb.co.uk/facebook www.preshweb.co.uk/identica www.lyricsbadger.co.uk "Programming is like sex. One mistake and you have to support it for the rest of your life". (Michael Sinz)

1 0

Logs directory
by Juan J. Martínez 17 Apr '10

17 Apr '10

Hello, I'm playing with 1.174 and I've found that the log it's managed inside lib/logs, but every time I launch the application, another logs/ directory is created with an empty development.log file. Since I've upgraded to 1.174 from GIT and ported my 'on going' application to the new layout (I love it, great work!), I don't know if it's my fault or it's a bug. Tell me your opinion, and I'll file a bug if needed. Cheers, Juanjo -- jjm's home: http://www.usebox.net/jjm/ blackshell: http://blackshell.usebox.net/ ramble on: http://rambleon.usebox.net/

2 3

deployment confusion
by Duncan Hutty 14 Apr '10

14 Apr '10

I'm looking to have nginx use Dancer to run a subsection of a website, but while I know how to use apache fairly well, I'm new to both nginx and Dancer. I've looked carefully at D::Deployment and nginx/PSGI/Plack docs and I confess to be a little confused as to where each part fits into the whole. I think I understand how to make nginx proxy for requests for the subsection using fastcgi: server { listen *:80; servername blah location / { root /var/www/html; index index.html } location /dancer { include fastcgi_params; fastcgi_pass unix:/var/run/dancer.sock; } } But that means that, unlike Apache, I need something else to create the socket, listen for requests, respond to the requests, etc. I think that could be a standalone plackup daemon: plackup -s FCGI --listen /var/run/dancer.sock --daemonize --nproc 5 --app /path/to/Dancer_App/app.psgi that would I then write my own initscript for. Is that: a) correct? b) considered to be an admirable, efficient way to run a small production server or is this more for a development environment? I think that instead of the plackup command, I could use Starman to do the same thing. I think my confusion is coming from the fact that there are so many possible ways to deploy and I don't have a good understanding of how fastcgi/psgi/plack all fit together. Perhaps I need some explication rather than merely instructions, although instructions would be a good start:) Duncan Hutty

3 2

Re: [Dancer-users] Dancer and XSS
by Alexis Sukrieh 14 Apr '10

14 Apr '10

Hi John, I'm CC the list so everyone can join/contribute to this discussion. Le mercredi 14 avril 2010 à 07:23 +0000, John Berthels a écrit : > Hi, > > I'm maintaining a largeish perl web app on bare apache2 mod_perl. We're having some pain, having perhaps outgrown our existing home-grown partial-framework and I'm looking at different frameworks with a view to either stealing ideas or possibly migrating the app across. > > In particular, does Dancer give any support for html-escaping to prevent cross-site-scripting (XSS)? > > Different solutions I've seen so far include: Currently, Dancer does not provide any XSS-protection, but as you may now, the Dancer::Plugin interface allows you to build your own extensions. > 1 - html-escape all params on entry to the app (con: you need lots of un-escaping and so is hard to audit for correctness) Filtering all incoming params can easily be done with a before filter, like the following: before sub { while(my ($param, $value) = each(%{ params() })) { params->{$param} = some_xss_filter($value); } }; Better, this could be written in a plugin, like Dancer::Plugin::XSS and would then be enabled by just using that module in your webapp. > 2 - explicit html-escape in templates (con: you need this on nearly all variable interpolations in every template) This is not yet possible, but will be as soon as we add support for another kind of filter: "before_template", see http://github.com/sukria/Dancer/issues#issue/60 > 3 - auto html-escape in templates (con: this breaks some complex template logic) I suppose this can be done dependening on the tempate engine you're using (as Dancer lets you chose which one you want to use). For instance, I'm sure you can find some Teamplte Toolkit filters for that, and enable them in your Dancer configuration. > If you can give me any pointers to places in the Dancer docs that I've missed that cover this, that would be great. Otherwise, any advice you have would be gratefully received. Feel free to join the users mailing list if you have any questions. http://lists.perldancer.org/cgi-bin/listinfo/dancer-users Regards, -- Alexis Sukrieh

2 1

Return after redirect
by Juan J. Martínez 10 Apr '10

10 Apr '10

Hello, Sometimes I need to redirect to another page after testing things, and I want to leave the route ASAP, so I do something like: get '/test' => sub { if(params->{whatever}) { redirect '/'; return; } "Other stuff, blah"; }; get '/' => sub { template 'index'; }; I've switched to the dev branch, and that return after the redirect results in following error: Use of uninitialized value $line in length at ../local/HTTP/Server/Simple/PSGI.pm line 137. My question is: am I doing it right using return to leave the handler? Cheers, Juanjo -- jjm's home: http://www.usebox.net/jjm/ blackshell: http://blackshell.usebox.net/ ramble on: http://rambleon.usebox.net/

2 2

Create standard CPAN module structure
by Gabor Szabo 09 Apr '10

09 Apr '10

Hi, I have a couple of issues, before opening tickets let me ask them. IMHO it would be better to create a CPAN like distribution instead of what dancer creates now so I wonder if it would be better to dancer -a rock - create Makefile.PL - put module in lib and call it Rock.pm - in order to find the module the rock.pl should contain something like this: use Cwd (); use lib path(dirname(Cwd::abs_path $0), 'lib'); Making sure the module can be loaded even if the script is executed while the current directory is in another place. Add this before the "use Application;" line or add a function to Dancer setup_relative_dir() and insert that in the script or make this part of Dancer.pm. - creat t/ directory and a simple test that can launch the application and test it - Add default pod in the module: =head1 NAME Module - A Dance based web application =head COPYRIGHT =head1 LICENSE =cut regards Gabor

3 3