nathan/nixpkgs
1
0
Fork 0
mirror of https://github.com/NixOS/nixpkgs.git synced 2026-08-25 17:55:21 +00:00
Code Issues Packages Projects Releases Wiki Activity

perlPackages.Yancy: skip tests broken by Mojolicious 9.48

Browse Source 
Mojolicious 9.48 enforces CSRF token validation (CVE-2026-15747); these
tests drive forms without a token and fail with 400 "CSRF token failure".

Assisted-by: Claude Code (Claude Opus 5)
Signed-off-by: Stig Palmquist <git@stig.io>
This commit is contained in:
Stig Palmquist
2026-08-09 05:58:49 +00:00
committed by Marcus Ramberg
parent 7b1e682245
commit d4db41d8bf
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
pkgs/top-level/perl-packages.nix
View File

@@ -39604,6 +39604,11 @@ with self;
MojoliciousPluginOpenAPI
RoleTiny
];
# Mojolicious 9.48 enforces CSRF token validation (CVE-2026-15747); these
# tests drive forms without a token and fail with 400 "CSRF token failure".
preCheck = ''
rm t/plugin/auth/github.t t/plugin/form/bootstrap4.t
'';
meta = {
homepage = "http://preaction.me/yancy/";
description = "Best Web Framework Deserves the Best CMS";