Stefan Härter

• About: Working with Perl and using Dancer2 for my hobby project, a small blog site. Besides that, interested in git and Linux.

Recent Actions

• Commented on Dancer2 2.2.0 released; security updates PLEASE READ
  Thank you for the explanations - I assumed that to be not so much of a good idea, but got a bit insecure. It was not my intention to be unfriendly....
• Commented on Dancer2 2.2.0 released; security updates PLEASE READ
  Hey Jason, thanks for posting this release note. I hope it's ok to shamelessly use the opportunity for a question: Being the maintainer of a small Dancer2::Plugin module, would you recommend to pin the latest Dancer2 core version as a...

Comment Threads

• Aristotle commented on Dancer2 2.2.0 released; security updates PLEASE READ

  Stefan, doing that as a rigid rule is actively unfriendly.

  It’s quite possible for a given Dancer application to run an older version of Dancer without being affected by any of these security issues. If your module starts requiring a newer version of Dancer than strictly necessary, then such an application cannot be upgraded to a newer version of your module without at least checking whether Dancer can safely also be upgraded – which of course it usually will be, it just cannot be assumed blindly.

  And if that does turn out not to be safe, then upgrading your module will r…