[Dancer-users] A new dancer plugin.

[Puneet Kishor]

On May 13, 2012, at 12:34 PM, igor.bujna at post.cz wrote:

> Hi,
> looks good, but I think you have little bug in this lines in subs _set_hsts_header:
> 
> sub _set_hsts_header {
>    my $settings    = plugin_setting;
>    my $hsts_age    = $settings->{hsts_age} // 31536000;
>    my $subdomains  = $settings->{hsts_include_subdomains} // 0;
> 
> Should be place this '||' than '//'
> 
>    my $hsts_age    = $settings->{hsts_age} || 31536000;
>    my $subdomains  = $settings->{hsts_include_subdomains} || 0;
> 



Not necessarily...

C-style Logical Defined-Or

Although it has no direct equivalent in C, Perl's // operator is related to its C-style or. In fact, it's exactly the same as ||, except that it tests the left hand side's definedness instead of its truth. Thus, $a // $b is similar to defined($a) || $b (except that it returns the value of $a rather than the value of defined($a)) and yields the same result as defined($a) ? $a : $b (except that the ternary-operator form can be used as a lvalue, while $a// $b cannot). This is very useful for providing default values for variables. If you actually want to test if at least one of $a and $b is defined, use defined($a // $b)

http://perldoc.perl.org/perlop.html#Operator-Precedence-and-Associativity



>> ------------ Původní zpráva ------------
>> Od: Natal Ngétal <hobbestigrou at erakis.im>
>> Předmět: [Dancer-users] A new dancer plugin.
>> Datum: 13.5.2012 16:01:36
>> ----------------------------------------
>> Hi all,
>> 
>> Yesterday I wrote a new dancer plugin to redirect all incoming
>> requests to https inspired by flask-sslify. The project was renamed to
>> don't confuse the users, thanks mst to advise. I'm hope the code look
>> fine and be useful.
>> 
>> Dancer::Plugin::RequireSSL also provides your application with an HSTS policy.
>> 
>> http://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security
>> 
>> By default hsts_age is set for one year 31536000 seconds, and can also
>> include subdomains in your HSTS policy by default is false.
>> 
>> To configure plugin:
>> 
>> RequireSSL:
>>  hsts_age: 31536000
>>  hsts_include_subdomains: 0
>> 
>> In your config.yml.
>> 
>> Regards
>> 
>> -- 
>> \0/ Hobbestigrou
>> site web: erakis.im
>> _______________________________________________
>> Dancer-users mailing list
>> Dancer-users at perldancer.org
>> http://www.backup-manager.org/cgi-bin/listinfo/dancer-users
>> 
>> 
>> 
> _______________________________________________
> Dancer-users mailing list
> Dancer-users at perldancer.org
> http://www.backup-manager.org/cgi-bin/listinfo/dancer-users