--- libdbix-safe-perl-1.2.5.orig/Safe.pm.html +++ libdbix-safe-perl-1.2.5/Safe.pm.html @@ -4,13 +4,15 @@ DBIx::Safe - Safer access to your database through a DBI database handle - + -

+ +
+

+ +
+
-


@@ -86,7 +90,7 @@ a wrapper to the database, by only allowing through the commands you tell it to. It filters all things related to the database handle - methods and attributes.

The typical usage is for your application to create a database handle via a normal -DBI call to new(), then pass that to DBIx::Safe->new(), which will return you a +DBI call to new(), then pass that to DBIx::Safe->new(), which will return you a DBIx::Safe object. After specifying exactly what is and what is not allowed, you can pass the object to the untrusted application. The object will act very similar to a DBI database handle, and in most cases can be used interchangeably.

@@ -117,15 +121,15 @@

Deciding what attributes to allow

Database handle attributes are controlled by a single list of allowed keys. If the key is allowed, the underlying database handle value is returned or changed (or both). -Note that the attribute ``AutoCommit'' is never allowed to be changed.

+Note that the attribute "AutoCommit" is never allowed to be changed.

Methods

new()

-

Creates a new DBIx::Safe object. Requires a mandatory ``dbh'' argument containing an active database -handle. Optional arguments are ``allow_command'', ``allow_regex'', ``deny_regex'', and ``allow_attribute''.

+

Creates a new DBIx::Safe object. Requires a mandatory "dbh" argument containing an active database +handle. Optional arguments are "allow_command", "allow_regex", "deny_regex", and "allow_attribute".

allow_command()

@@ -148,7 +152,7 @@

deny_regex()

-

Specifies regular expressions which are NOT allowed to run. Arguments and return the same as allow_regex().

+

Specifies regular expressions which are NOT allowed to run. Arguments and return the same as allow_regex().

undeny regex()

--- libdbix-safe-perl-1.2.5.orig/debian/compat +++ libdbix-safe-perl-1.2.5/debian/compat @@ -0,0 +1 @@ +7 --- libdbix-safe-perl-1.2.5.orig/debian/control +++ libdbix-safe-perl-1.2.5/debian/control @@ -0,0 +1,40 @@ +Source: libdbix-safe-perl +Section: perl +Priority: optional +Build-Depends: debhelper (>= 7) +Build-Depends-Indep: perl, perl-modules, libmodule-signature-perl (>= 0.50), + libdbd-pg-perl (>= 1.49), libdbi-perl (>= 1.49) +Maintainer: Debian Perl Group +Uploaders: Krzysztof Krzyzaniak (eloy) +Standards-Version: 3.8.3 +Homepage: http://search.cpan.org/dist/DBIx-Safe/ +Vcs-Svn: svn://svn.debian.org/pkg-perl/trunk/libdbix-safe-perl/ +Vcs-Browser: http://svn.debian.org/viewsvn/pkg-perl/trunk/libdbix-safe-perl/ + + +Package: libdbix-safe-perl +Architecture: all +Depends: ${perl:Depends}, ${misc:Depends}, libdbi-perl (>= 1.49) +Description: Safe wrapper to DBI interface + The purpose of this module is to give controlled, limited access to an + application, rather than simply passing it a raw database handle through DBI. + DBIx::Safe acts as a wrapper to the database, by only allowing through the + commands you tell it to. It filters all things related to the database handle + - methods and attributes. + . + The typical usage is for your application to create a database handle via a + normal DBI call to new(), then pass that to DBIx::Safe->new(), which will + return you a DBIx::Safe object. After specifying exactly what is and what is + not allowed, you can pass the object to the untrusted application. The object + will act very similar to a DBI database handle, and in most cases can be used + interchangeably. + . + By default, nothing is allowed to run at all. There are many things you can + control. You can specify which SQL commands are allowed, by indicating the + first word in the SQL statement (e.g. 'SELECT'). You can specify which + database methods are allowed to run (e.g. 'ping'). You can specify a regular + expression that allows matching SQL statements to run (e.g. 'qr{SET + TIMEZONE}'). You can specify a regular expression that is NOT allowed to run + (e.g. qr(UPDATE xxx}). Finally, you can indicate which database attributes + are allowed to be read and changed (e.g. 'PrintError'). For all of the above, + there are matching methods to remove them as well. --- libdbix-safe-perl-1.2.5.orig/debian/rules +++ libdbix-safe-perl-1.2.5/debian/rules @@ -0,0 +1,4 @@ +#!/usr/bin/make -f + +%: + dh $@ --- libdbix-safe-perl-1.2.5.orig/debian/changelog +++ libdbix-safe-perl-1.2.5/debian/changelog @@ -0,0 +1,5 @@ +libdbix-safe-perl (1.2.5-1) unstable; urgency=low + + * Initial Release. (Closes: #528719) + + -- Krzysztof Krzyzaniak (eloy) Sat, 19 Sep 2009 23:56:10 +0200 --- libdbix-safe-perl-1.2.5.orig/debian/watch +++ libdbix-safe-perl-1.2.5/debian/watch @@ -0,0 +1,2 @@ +version=3 +http://search.cpan.org/dist/DBIx-Safe/ .*/DBIx-Safe-v?(\d[\d.-]+)\.(?:tar(?:\.gz|\.bz2)?|tgz|zip)$ --- libdbix-safe-perl-1.2.5.orig/debian/libdbix-safe-perl.docs +++ libdbix-safe-perl-1.2.5/debian/libdbix-safe-perl.docs @@ -0,0 +1,2 @@ +TODO +README --- libdbix-safe-perl-1.2.5.orig/debian/copyright +++ libdbix-safe-perl-1.2.5/debian/copyright @@ -0,0 +1,49 @@ +Format-Specification: + http://wiki.debian.org/Proposals/CopyrightFormat?action=recall&rev=196 +Upstream-Maintainer: Greg Sabino Mullane +Upstream-Source: http://search.cpan.org/dist/DBIx-Safe/ +Upstream-Name: DBIx-Safe + +Files: * +Copyright: Greg Sabino Mullane +License: BSD | Artistic | GPL-1+ + +Files: debian/* +Copyright: 2009, Krzysztof Krzyzaniak (eloy) +License: Artistic | GPL-1+ + +License: BSD + Redistribution and use in source and binary forms, with or without + modification, are permitted provided that the following conditions are met: + + 1. Redistributions of source code must retain the above copyright notice, + this list of conditions and the following disclaimer. + 2. Redistributions in binary form must reproduce the above copyright notice, + this list of conditions and the following disclaimer in the documentation + and/or other materials provided with the distribution. + + THIS SOFTWARE IS PROVIDED BY THE AUTHOR "AS IS" AND ANY EXPRESS OR IMPLIED + WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF + MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO + EVENT SHALL THE AUTHOR BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, + EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT + OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS + INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN + CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING + IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY + OF SUCH DAMAGE. + + +License: Artistic + This program is free software; you can redistribute it and/or modify + it under the terms of the Artistic License, which comes with Perl. + On Debian GNU/Linux systems, the complete text of the Artistic License + can be found in `/usr/share/common-licenses/Artistic' + +License: GPL-1+ + This program is free software; you can redistribute it and/or modify + it under the terms of the GNU General Public License as published by + the Free Software Foundation; either version 1, or (at your option) + any later version. + On Debian GNU/Linux systems, the complete text of the GNU General + Public License can be found in `/usr/share/common-licenses/GPL' --- libdbix-safe-perl-1.2.5.orig/t/02perlcritic.t +++ libdbix-safe-perl-1.2.5/t/02perlcritic.t @@ -36,13 +36,3 @@ plan tests => 1; Test::Perl::Critic->import( -profile => $PROFILE ); critic_ok($CODE); -#all_critic_ok(); - -__DATA__ - -plan tests => 1; -my $critic = Perl::Critic->new(-profile => $PROFILE); -my @problems = $critic->critique($CODE); -is(@problems, 0, "Passed Perl::Critic run"); -use Data::Dumper; -