From cd1ddea2cd65ba575a0c8c45be8a8eaa7571c232 Mon Sep 17 00:00:00 2001 From: Kenichi Ishigaki Date: Sun, 26 Apr 2026 02:01:58 +0900 Subject: [PATCH 1/4] Remove insecure links in emails --- .../templates/email/admin/user/welcome_user.email.ep | 2 -- lib/pause_2017/templates/email/user/delete_files.email.ep | 3 +-- 2 files changed, 1 insertion(+), 4 deletions(-) diff --git a/lib/pause_2017/templates/email/admin/user/welcome_user.email.ep b/lib/pause_2017/templates/email/admin/user/welcome_user.email.ep index 0640e15c2..4776d2552 100644 --- a/lib/pause_2017/templates/email/admin/user/welcome_user.email.ep +++ b/lib/pause_2017/templates/email/admin/user/welcome_user.email.ep @@ -24,8 +24,6 @@ database dumps. You can register with both a public and a secret email if you want to protect yourself from SPAM. If you want to do this, please visit <%== my_full_url->path("/pause/authenquery")->query(ACTION => "edit_cred" )->scheme("https") %> -or - <%== my_full_url->path("/pause/authenquery")->query(ACTION => "edit_cred" )->scheme("http") %> If you need any further information, please visit $CPAN/modules/04pause.html. diff --git a/lib/pause_2017/templates/email/user/delete_files.email.ep b/lib/pause_2017/templates/email/user/delete_files.email.ep index ca74814e9..f31cc8151 100644 --- a/lib/pause_2017/templates/email/user/delete_files.email.ep +++ b/lib/pause_2017/templates/email/user/delete_files.email.ep @@ -7,8 +7,7 @@ According to a request entered by <%== $pause->{User}{fullname} %> the following files and the symlinks pointing to them have been scheduled for deletion. They will expire after 72 hours and then be deleted by a cronjob. Until then you can undelete them via -<%== my_full_url->path("/pause/authenquery")->query(ACTION => "delete_files")->scheme("https") %> or -<%== my_full_url->path("/pause/authenquery")->query(ACTION => "delete_files")->scheme("http") %> +<%== my_full_url->path("/pause/authenquery")->query(ACTION => "delete_files")->scheme("https") %> % end <%== $pause->{blurb} %> From f1a454eef5d127ab8a2f5dc1466f8e0476d1801a Mon Sep 17 00:00:00 2001 From: Kenichi Ishigaki Date: Sun, 26 Apr 2026 02:02:30 +0900 Subject: [PATCH 2/4] Remove how to make an insecure link --- .../templates/email/admin/user/onetime_password.email.ep | 5 +---- 1 file changed, 1 insertion(+), 4 deletions(-) diff --git a/lib/pause_2017/templates/email/admin/user/onetime_password.email.ep b/lib/pause_2017/templates/email/admin/user/onetime_password.email.ep index 5b7aee6e6..1d8f66403 100644 --- a/lib/pause_2017/templates/email/admin/user/onetime_password.email.ep +++ b/lib/pause_2017/templates/email/admin/user/onetime_password.email.ep @@ -16,10 +16,7 @@ you to pick your own password. This password is "<%== $pause->{onetime} %>" and use this password to initialize your account in the authentication database. Once you have entered your password there, your one-time -password is expired automatically. If you cannot connect to the above -URL, you can replace 'https' with 'http', but then you are not using -SSL encryption. Be careful to always use an SSL connection if -possible, otherwise your password can be intercepted by third parties. +password is expired automatically. Thanks & Regards, -- From 766998566e378c39e3fb12ba92fdbc67f5e2d3fb Mon Sep 17 00:00:00 2001 From: Kenichi Ishigaki Date: Sun, 26 Apr 2026 02:02:44 +0900 Subject: [PATCH 3/4] Replace a link to the backpan --- lib/pause_2017/templates/email/user/delete_files.email.ep | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/lib/pause_2017/templates/email/user/delete_files.email.ep b/lib/pause_2017/templates/email/user/delete_files.email.ep index f31cc8151..52227080f 100644 --- a/lib/pause_2017/templates/email/user/delete_files.email.ep +++ b/lib/pause_2017/templates/email/user/delete_files.email.ep @@ -14,7 +14,7 @@ cronjob. Until then you can undelete them via %= text_format begin Note: to encourage deletions, all of past CPAN -glory is collected on http://history.perl.org/backpan/ +glory is collected on https://backpan.perl.org/ % end The PAUSE Team From f24a9a6de8d93c94d677870ae200572268e99ba1 Mon Sep 17 00:00:00 2001 From: Kenichi Ishigaki Date: Sun, 26 Apr 2026 17:05:53 +0900 Subject: [PATCH 4/4] Replace more links --- lib/pause_2017/templates/public/request_id/_form.html.ep | 2 +- lib/pause_2017/templates/user/edit_uris.html.ep | 6 +++--- lib/pause_2017/templates/user/uri/_continued.html.ep | 2 +- 3 files changed, 5 insertions(+), 5 deletions(-) diff --git a/lib/pause_2017/templates/public/request_id/_form.html.ep b/lib/pause_2017/templates/public/request_id/_form.html.ep index b090853b1..4819eeb01 100644 --- a/lib/pause_2017/templates/public/request_id/_form.html.ep +++ b/lib/pause_2017/templates/public/request_id/_form.html.ep @@ -3,7 +3,7 @@

A PAUSE account is only required to distribute and manage Perl module distributions on CPAN. You do not need a PAUSE account to submit -bug reports to RT or participate +bug reports to RT or participate in many Perl community sites.

diff --git a/lib/pause_2017/templates/user/edit_uris.html.ep b/lib/pause_2017/templates/user/edit_uris.html.ep index baf4724bb..9b7d1cf65 100644 --- a/lib/pause_2017/templates/user/edit_uris.html.ep +++ b/lib/pause_2017/templates/user/edit_uris.html.ep @@ -35,7 +35,7 @@ to fix broken uploads that cannot be completed, not an opportunity to turn the time back.

To re-iterate: If you change the content of this field to -http://www.slashdot.org/, PAUSE will fetch the current +https://slashdot.org/, PAUSE will fetch the current Slashdot page and will put it into <%= $pause->{selected}{uriid} %>. If you change it to FooBar-3.14.tar.gz, PAUSE will try to get @@ -43,8 +43,8 @@ Slashdot page and will put it into finds it, it puts it into <%= $pause->{selected}{uriid} %>.

An example: if you made a typo and requested to upload -http://badsite.org/foo instead of -http://goodsite.org/foo, just correct the thing in the +https://badsite.org/foo instead of +https://goodsite.org/foo, just correct the thing in the textfield below.

Another example: If your upload was unsuccessful and you now have diff --git a/lib/pause_2017/templates/user/uri/_continued.html.ep b/lib/pause_2017/templates/user/uri/_continued.html.ep index 6a797af33..e259c7a58 100644 --- a/lib/pause_2017/templates/user/uri/_continued.html.ep +++ b/lib/pause_2017/templates/user/uri/_continued.html.ep @@ -23,7 +23,7 @@ of a module on several hundred mirrors. Please consider ">removing old versions of your module from PAUSE and CPAN. If you are worried that someone might need an old version, it can always be found on the backpan +href="https://backpan.perl.org/authors/id/<%= $pause->{userhome} %>/">backpan

Debugging: your submission should show up soon at