- dancer-users - lists.preshweb.co.uk

Re: [dancer-users] Template Toolkit Sort Hash
by Shlomi Fish 28 Sep '15

28 Sep '15

Hi Richard, replying to the list. Please reply to the list next time - see the last line of my signature. On Mon, 28 Sep 2015 08:32:08 -0500 Richard Reina <gatorreina(a)gmail.com> wrote: > 2015-09-28 3:28 GMT-05:00 Shlomi Fish <shlomif(a)shlomifish.org>: > > > Hi Richard, > > > > some comments on your code: > > > > On Sun, 27 Sep 2015 17:59:42 -0500 > > Richard Reina <gatorreina(a)gmail.com> wrote: > > > > > 2015-09-27 11:24 GMT-05:00 Dave Cross <dave(a)dave.org.uk>: > > > > > > > > > > > On 27/09/15 16:34, Richard Reina wrote: > > > > > > > > I think I am going to try to figure out how to use an array reference > > > >> instead. Traveling so can't try it until I get back tomorrow. > > > >> > > > > > > > > You can, of course, try whatever approach you want. But my second > > solution > > > > will work. > > > > > > > > Dave... > > > > > > > > -- > > > > > > > > > > Hi Dave, > > > > > > This did in fact work. Here is how I ended up incorporating your > > solution. > > > > > > <div class="well" style="max-height: 300px;overflow: auto;"> > > > <ul class="list-group fancy-list-items">  > > > <table style="width:100%"> > > > <% FOREACH Pat IN Pats.values.sort('SNAME') -%> > > > <tr class="list-group-item"> > > > <td width="25"><% Pat.ID %> > > > <td width="70"><% Pat.SNAME %> > > > <td width="75"><% Pat.ANAME %> > > > <td width="35"><% Pat.SSN %> > > > <td width="35"><% Pat.YR %> > > > <td width="250"><% Pat.CHNAME %> > > > <td width="550"><% Pat.DESCRIP %> > > > > 1. You're missing the closing tag - "</td>". > > > > Thanks for pointing out. Can't believe I missed that. > You're welcome. Are you validating your output? Do you have automated tests to do it for you? > > > 2. Are you sure you're avoiding > > https://en.wikipedia.org/wiki/Cross-site_scripting ? Also see > > http://perl-begin.org/tutorials/bad-elements/#code_and_markup_injection . > > > > > I am not sure. Despite reading the recommended links I don't know enough to > be sure. Why do you ask? Because cross-site scripting (XSS) can be a serious security vulnerability. Let's suppose you put a field called "myfield" that was input from the user directly into the HTML: <td><% myfield %></td> Then a malicious user can put something like this in "myfield": <script type="text/javascript">alert('XSS!')</script> And this is just the beginning of malicious JS that can be inserted. For a cautionary measure, see: https://metacpan.org/release/Template-Stash-AutoEscaping Regards, Shlomi Fish -- ----------------------------------------------------------------- Shlomi Fish http://www.shlomifish.org/ Optimising Code for Speed - http://shlom.in/optimise A: I’m hungry today. B: Well, wait until tomorrow. Maybe this feeling will pass. Please reply to list if it's a mailing list post - http://shlom.in/reply .

3 3

Re: [dancer-users] Content-disposition-header.
by Rick Leir 28 Sep '15

28 Sep '15

On Mon, Sep 28, 2015 at 7:00 AM, <dancer-users-request(a)dancer.pm> wrote: > Using send_file seems not appropriate, because it sets > Content-disposition-header. > Strange. I do not get Content-disposition-header in the response from this: get '/' => sub { send_file 'index.html'; }; Only these: Content-Length439Content-Typetext/html; charset=utf-8DateMon, 28 Sep 2015 13:26:01 GMTServerHTTP::Server::PSGI Do not use Content-disposition-header unless you have a reason to need it: http://stackoverflow.com/questions/1012437/uses-of-content-disposition-in-a… cheers -- Rick

2 1

Dancer2 before_file_render hook
by Alex Mestiashvili 28 Sep '15

28 Sep '15

Is there a way to protect a file in the public directory with Dancer2? In Dancer I was using before_file_render hook to achieve that. before_file_render is still present in Dancer2::Handler::File, but It doesn't work out of box for me. Thank you

3 4

Template Toolkit Sort Hash
by Richard Reina 28 Sep '15

28 Sep '15

I display a hash reference in a template. It works well but is there a way I can sort it by SNAME instead of ID? <ul class="list-group fancy-list-items">  <table style="width:100%"> <% FOREACH ID IN Pats.keys.sort %> <tr class="list-group-item"> <td width="70"><% Pats.$ID.SNAME %></td> <td width="75"><% Pats.$ID.ANAME %></td> <td width="35"><% Pats.$ID.SSN %></td> <td width="35"><% Pats.$ID.YR %></td> <td width="250"><% Pats.$ID.CHNAME %></td> <td width="550"><% Pats.$ID.DESCRIP %></td> <% END %> </tr> </ul> </table> Thanks

6 17

Change of Dancer1 release manager, and feature-freeze
by David Precious 26 Sep '15

26 Sep '15

Hi all, Yanick is standing down from D1 release manager in order to be able to focus on D2 development - please join me in thanking him for all his hard work keeping D1 maintained and useful! I'm happy to put my hand up and announce that I'm taking over as release manager for Dancer1 - I still make heavy use of Dancer 1 at $work, and we're not in a position to convert over to Dancer 2 yet, so I'll need it maintained for some time either way :) I'd also like to make clear the policy that Dancer 1 is essentially feature-frozen, but will still receive bug fixes for any high-impact or trivial to fix bugs, and will of course receive prompt fixes for any discovered security issues - I shan't be turning my back on D1 at any point soon. In the near future I plan to review outstanding issues and pull requests and see what should be fixed and what's better to consider a "let's get this done in Dancer 2" plan, and get a new D1 release out. In a slightly longer term, I'd like to work on some documentation and tools to make migration from D1 to D2 easier - I need to have a long think about what I can do there! Cheers Dave P (bigpresh)

5 4

Re: [dancer-users] list picker
by Rick Leir 26 Sep '15

26 Sep '15

On Fri, Sep 25, 2015 at 7:00 AM, <dancer-users-request(a)dancer.pm> wrote: > > > In which case you have 2 options: > > > > 1. Process it client-side with javascript (not recommended) > > 2. Make each "addition" a new request, and store server-side Do it client-side. Much more responsive. http://code.google.com/p/bootstrap-listpicker/ cheers -- Rick

2 1

News Flash - Perl::Dancer Conference
by Sam Batschelet 26 Sep '15

26 Sep '15

Dancer Enthusiasts, With less than a month until the 2015 Perl Dancer Conference in Vienna, we have a lot of exciting news. First off we would like to send a special thank you to our growing list of sponsors, without their help this event would not be possible. As a result of their generous donations each attendee to the conference will receive a soon to be classic Perl Dancer t-shirt! [Gold Sponsor] * Booking: Best price guarantee‎ - http://www.booking.com [Silver Sponsor] * Weborama: Digital Advertising Solutions - http://www.weborama.com * Informa: IT Consulting - http://www.informastudio.com [Bronze Sponsors] * Calevo: Horse Gear and Supplies - http://www.calevo.com * Eligo: Recruitment Consultants - http://www.eligo.co.uk/technology * M&D: Mower and Appliance - https://www.m-and-d.com * Ctrl O: Open IT Solutions - http://www.ctrlo.com Please support these great companies and visit https://www.perl.dance/sponsors for the complete list of event sponsors. It is also not too late to become a sponsor https://www.perl.dance/sponsoring. Contact us at 2015(a)perl.dance and we will have a team member work out a custom sponsorship for any budget. We are very proud to announce the 2015 Perl Dancer Conference has five Dancer core developers and the primary maintainer for DBIx::Class attending. The confirmed guest list includes: [-] *Dancer's founder, Alexis Sukrieh (sukria) - https://www.perl.dance/users/46-alexis-sukrieh [-] *Stefan Hornburg (Racke) - https://www.perl.dance/users/4-stefan-hornburg [-] *Sawyer X - https://www.perl.dance/users/1-sawyer-x [-] *Mickey Nasriachi (Mickey) - https://www.perl.dance/users/35-mickey-nasriachi [-] *Russell Jenkins (very rusty) - https://www.perl.dance/users/19-russell-jenkins [-] *Peter Rabbitson (ribasushi) - https://www.perl.dance/users/18-peter-rabbitson *disclaimer (these names are in NO special order) This is a unique chance to meet the hard working gurus that make Dancer and DBIx::Class great. You know their handles on IRC, now get a chance to put a face with the name. Maybe even buy them those beers you have been promising on IRC all these years. Finally after multiple international conference calls, a few IRC battles and a coin toss we decided to let Peter Mottram (SysPete) do the event scheduling. Thanks Peter! Our final schedule is now live on https://www.perl.dance/talks/schedule. We have a really great list of talks and training sessions lined up this year. Our international list of guest speakers and instructors spans three continents! Tickets are still on sale, don’t miss out! If you are already attending or on the fence please checkout or make comments on our super fun event Wiki. https://www.perl.dance/wiki. We hope to see you all in Vienna this October! Enjoy!, Sam Batschelet (hexfusion) https://www.perl.dance https://www.facebook.com/Perl-Dancer-Conference-670529456366338

1 0

Re: [dancer-users] start - annocpan
by Rick Leir 25 Sep '15

25 Sep '15

On Fri, Sep 25, 2015 at 7:00 AM, <dancer-users-request(a)dancer.pm> wrote: > But if you use .pm file and starting application with the command > 'plackup', 'start' or 'dance' is not needed thanks, and I took the liberty of adding this to http://www.annocpan.org/~XSAWYERX/Dancer2-0.162000/lib/Dancer2/Manual.pod cheers -- Rick

1 0

Re: [dancer-users] thanks Yanick and David
by Rick Leir 25 Sep '15

25 Sep '15

> > Yanick is standing down from D1 release manager in order to be able to > focus on D2 development - please join me in thanking him for all his > hard work keeping D1 maintained and useful! Thanks Yanick and David cheers -- Rick

1 0

Why there are Dancer and Dancer2
by Андрей Фирсов 25 Sep '15

25 Sep '15

Hello. Actually i have question about Dancer. Why it has two versions: Dancer and Dancer2? What is the main difference between them?

3 3