Changes for version 0.35

  • README update to explain Perl 5.005_03 compatibility.
  • POD update to explain "recent memory" and to note that the Anthill Bug Manager is now the official large example of how to use CGI::SecureState.
  • Fixed some minor security concerns. These were: a) not including the remote IP address in the encryption key, and b) only having around 80 bits of randomness in ID generation instead of over 160.
  • Since fixing the security concerns changed the encryption key, the binary format has changed Yet Again. However, it is now more compact and fixes problems with corner cases.
  • Added the clean_statedir() function to ease the purging of old state files from directories.
  • Added some internal convenience functions (args_to_hash(), stringify_recent_memory(), recover_recent_memory(), generate_random_id()).
  • Added the memory_as() function to add recent memory to the state_* functions.
  • Added user_param(), user_params(), and user_delete() for interaction with "recent memory".
  • Added tests for "recent memory".
  • Addition of the "recent memory" concept that lets user- specified parameters take precedence over parameters in the state file.
  • Fixes for Perl 5.005_03.
  • Made new() check for ID tag in url_param (suggestion from Hise Chapman (hise at nc.rr.com).
  • ---Old Releases-----------------------------------------------

Modules

Transparent, secure statefulness for CGI programs