[Catalyst] moving from Auth::Store::DBIC to Auth::Store::DBIx::Class

2010-04-01 Thread Fernan Aguero
Hi, after reading lots of warnings in our logs about Authentication::Store::DBIC being deprecated, I thought about devoting some time to move to its replacement, Authentication::Store::DBIx::Class, but upon starting to work on this I've also started to hit on some problems. So, my first question

Re: [Catalyst] Views and escaping HTML

2010-04-01 Thread Peter Edwards
On 1 April 2010 19:58, Mesdaq, Ali wrote: > Actually I was not aware of built-in | html escaping. Where is the > documentation for that? Or better yet where exactly is that built-in? Is > that a catalyst method or TT? Now the authors question makes A LOT more > sense. I guess I must be doing thin

Re: [Catalyst] Views and escaping HTML

2010-04-01 Thread J. Shirley
On Thu, Apr 1, 2010 at 11:58 AM, Mesdaq, Ali wrote: > Actually I was not aware of built-in | html escaping. Where is the > documentation for that? Or better yet where exactly is that built-in? Is that > a catalyst method or TT? Now the authors question makes A LOT more sense. I > guess I must b

Re: [Catalyst] Views and escaping HTML

2010-04-01 Thread Brian Phillips
http://search.cpan.org/~abw/Template-Toolkit-2.22/lib/Template/Manual/Filters.pod#html On Thu, Apr 1, 2010 at 1:58 PM, Mesdaq, Ali wrote: > Actually I was not aware of built-in | html escaping. Where is the > documentation for that? Or better yet where exactly is that built-in? Is > that a catal

RE: [Catalyst] Views and escaping HTML

2010-04-01 Thread Mesdaq, Ali
Actually I was not aware of built-in | html escaping. Where is the documentation for that? Or better yet where exactly is that built-in? Is that a catalyst method or TT? Now the authors question makes A LOT more sense. I guess I must be doing things the 1999 way. Thanks, ---

[Catalyst] [OT] XSS, XSRF, and REST

2010-04-01 Thread Bill Moseley
We love our acronyms. As discussed in another recent exciting thread, I use a unique, single-use token on forms that must be returned with a POST. This seems to be the best approach to prevent XSRF[1]. But, what about for a (RESTful) API where it's common to receive a PUT or POST request withou

Re: [Catalyst] Views and escaping HTML

2010-04-01 Thread J. Shirley
On Thu, Apr 1, 2010 at 10:27 AM, Mesdaq, Ali wrote: > You prefer global escaping to escaping in the template? I use the TT plugin > for escaping > > [% USE HTML %] > [% HTML.escape(needs.escaping) %] > > An idea that might work for you would be if you structure your data in the > stash and creat

RE: [Catalyst] Views and escaping HTML

2010-04-01 Thread Mesdaq, Ali
You prefer global escaping to escaping in the template? I use the TT plugin for escaping [% USE HTML %] [% HTML.escape(needs.escaping) %] An idea that might work for you would be if you structure your data in the stash and create your templates generically looking for data in specific stash lo

[Catalyst] What to upload

2010-04-01 Thread Paul Falbe
I'm getting close to uploading my first Catalyst App from my laptop to our website which is hosted for us. What directories need to be uploaded to this machine? I understand I also have to create a .htaccess file so my app uses FastCGI and properly redirects. Where is this file normally located

[Catalyst] broken planet

2010-04-01 Thread Guillaume Chambriat
hi, Seems like Planet Catalyst[1] is broken. [1] http://planet.catalystframework.org/ bye, -- Guillaume Chambriat ___ List: Catalyst@lists.scsys.co.uk Listinfo: http://lists.scsys.co.uk/cgi-bin/mailman/listinfo/catalyst Searchable archive: http:

[Catalyst] Re: Views and escaping HTML

2010-04-01 Thread Tomas Doran
Ovid wrote: package Veure::View::HTML; use Modern::Perl; use parent 'Catalyst::View::TT'; __PACKAGE__->config( TEMPLATE_CLASS => 'Template::HTML', TEMPLATE_EXTENSION => '.tt', WRAPPER=> 'site/wrapper', ); However, that doesn't work because the template c

[Catalyst] Views and escaping HTML

2010-04-01 Thread Ovid
Hi all, I've been searching for the best answer, but there's a huge amount to wade through. I'm working on a Catalyst app where all views are purely HTML. I use Catalyst::View::TT. The vast majority of my data in views should be HTML escaped: [% message | html %] However, I'd like that

Re: [Catalyst] Distributing and updating Cat apps

2010-04-01 Thread Toby Corkindale
On 30/03/10 19:32, Tomáš Znamenáček wrote: Hello! I have a Catalyst application that I would like to upload from the development box to the production server. Is there some kind of best practice to do that? My requirements: 1) The process should take care of the dependencies and run the tests