Info3: <<
Package: lwpx-paranoidagent-pm%type_pkg[perl]
Version: 1.09
Revision: 1
Depends: <<
  libwww-pm%type_pkg[perl],
  encode-locale-pm%type_pkg[perl],
  http-message-pm%type_pkg[perl],
  io-html-pm%type_pkg[perl],
  http-date-pm%type_pkg[perl],
  html-parser-pm%type_pkg[perl],
  http-daemon-pm%type_pkg[perl],
  net-dns-pm%type_pkg[perl],
  digest-hmac-pm,
<<
Source: mirror:cpan:authors/id/S/SA/SAXJAZMAN/lwp/LWPx-ParanoidAgent-%v.tar.gz
Source-Checksum: SHA256(358036d5df4c25afbec0f72a9997a44a05db7284a1941369f8fb9f823caa3d27)
Type: perl (5.16.2 5.18.2 5.18.4 5.28.2 5.30.2 5.30.3)
Distribution: <<
	(%type_pkg[perl] = 5162) 10.9,
	(%type_pkg[perl] = 5162) 10.10,
	(%type_pkg[perl] = 5162) 10.11,
	(%type_pkg[perl] = 5162) 10.12,
	(%type_pkg[perl] = 5162) 10.13
<<
UpdatePOD: true
DocFiles: ChangeLog README
InstallScript: <<
  %{default_script}
  mv %i/share/man %i/lib/perl5/%type_raw[perl]
<<
Description: LWP::UserAgent that protects you from harm
DescDetail: <<
The LWPx::ParanoidAgent is a class subclassing LWP::UserAgent, but
paranoid against attackers. It's to be used when you're fetching a
remote resource on behalf of a possibly malicious user.

This class can do whatever LWP::UserAgent can (callbacks, uploads from
files, etc), except proxy support is explicitly removed, because in
that case you should do your paranoia at your proxy.

Also, the schemes are limited to http and https, which are mapped to
LWPx::Protocol::http_paranoid and LWPx::Protocol::https_paranoid,
respectively, which are forked versions of the same ones without the
"_paranoid". Subclassing them didn't look possible, as they were
essentially just one huge function.

This class protects you from connecting to internal IP ranges (unless
you whitelist them), hostnames/IPs that you blacklist, remote
webserver tarpitting your process (the timeout parameter is changed to
be a global timeout over the entire process), and all combinations of
redirects and DNS tricks to otherwise tarpit and/or connect to
internal resources.
<<
###
License: Artistic
Maintainer: Jesse Alama <jesse.alama@gmail.com>
Homepage: https://metacpan.org/dist/LWPx-ParanoidAgent/
<<