Lee Johnson at http://leejo.github.io/
notified me via e-mail of a CGI module change:
> I will be releasing a version of CGI.pm shortly that may impact your code. More information can be seen in this blog post and the links therein:
This needs to be tested with TWiki.
There are other changes in CGI.pm that you may want to be aware of if you're not watching too closely. The big one is that, as of perl 5.22 (sometime this year), CGI.pm will no longer be a core perl module so users will have to install it manually. In all likelihood most OS vendors will probably still package it up and ship it with the system perl, however it's something to consider.
Here's a 5 minute talk i gave last year on the upcoming changes in CGI.pm: https://www.youtube.com/watch?v=BBYag43ojjM
Thanks, Lee, for this information!
I'd think the upcoming changes are not only
a matter of testing. We had quite a confusion about "Warning - calling param() in list context can lead to vulnerabilities" in TWiki, though these calls to param() were intentional, correct, and according to the docs. The reason was that people somehow caught the information that CGI.pm will be removed from the core and installed it from github. They did so though they had been running quite old versions of Perl, with a perfectly working CGI.pm. I don't object to the change in CGI.pm, but we need to factor in the habits of change management in the Perl community.
So we know
there will be changes in CGI.pm, and I agree that there are excellent reasons to do these changes (removing the HTML generation stuff in particular). But we also know that people will continue to use various versions of Perl, if only because the Linux distributions offer so many different versions (what's in current Red Hat? I bet it is not
5.20), therefore various versions of CGI.pm. And we know that TWiki is using stuff that is no longer considered good practice (the HTML generation stuff in particular).
For discussion, I have opened a feature request: TWiki:Codev/AddCGIpmToTWikiCore