Issues

• Parse query strings once, with Plack's parser, and drop CGI::Deurl::XS

  PerlDancer/Dancer2#1855 · Filter by author SysPete opened on Oct 14, 2026
  1

• Add .gitattributes so share/skel keeps LF on a Windows git checkout

  PerlDancer/Dancer2#1854 · Filter by author bigpresh opened on Oct 14, 2026
  1

• log_format's %{...}t block code renders the month as a number on some Windows systems

  PerlDancer/Dancer2#1853 · Filter by author bigpresh opened on Oct 14, 2026

• Use a single list of supported HTTP methods

  PerlDancer/Dancer2#1852 · Filter by author cromedome opened on Oct 14, 2026

• dancer2 gen -c writes the Dockerfile outside the app directory

  PerlDancer/Dancer2#1851 · Filter by author cromedome opened on Oct 14, 2026

• dancer2 gen -n tutorial puts schema classes in a "My::App" directory

  PerlDancer/Dancer2#1850 · Filter by author cromedome opened on Oct 14, 2026

• dancer2 gen -n tutorial writes a MANIFEST listing files that don't exist

  PerlDancer/Dancer2#1849 · Filter by author cromedome opened on Oct 14, 2026

• Serializer::Mutable calls Dancer2::Core::DSL functions without requiring it

  Bug
  PerlDancer/Dancer2#1820 · Filter by author bigpresh opened on Sep 10, 2026

• Dispatcher::dispatch copies the app list on every request

  Enhancement
  PerlDancer/Dancer2#1819 · Filter by author bigpresh opened on Sep 10, 2026

• Request::new eagerly parses the body on every request, including GETs

  Enhancement
  PerlDancer/Dancer2#1818 · Filter by author bigpresh opened on Sep 10, 2026

• Route::match re-parses the route regexp on every successful match

  Enhancement
  PerlDancer/Dancer2#1817 · Filter by author bigpresh opened on Sep 10, 2026

• FileUtils::escape_filename mishandles a filename of '0'

  Bug
  PerlDancer/Dancer2#1816 · Filter by author bigpresh opened on Sep 10, 2026

• Serializer::JSON: deserialize ignores engine config that serialize honours

  Bug
  PerlDancer/Dancer2#1815 · Filter by author bigpresh opened on Sep 10, 2026

• params('body') dies with 'Not a HASH reference' on a JSON array body

  Bug
  PerlDancer/Dancer2#1814 · Filter by author bigpresh opened on Sep 10, 2026
  1

• Route::_check_options interpolates the option name into a regex

  Bug
  PerlDancer/Dancer2#1813 · Filter by author bigpresh opened on Sep 10, 2026

• Inbound cookie values are silently truncated at '&'

  Bug
  PerlDancer/Dancer2#1812 · Filter by author bigpresh opened on Sep 10, 2026
  1

• params('query') returns undef until params() has been called

  Bug
  PerlDancer/Dancer2#1811 · Filter by author bigpresh opened on Sep 10, 2026
  1

• request->id returns the global counter, not the request's own id

  Bug
  PerlDancer/Dancer2#1810 · Filter by author bigpresh opened on Sep 10, 2026

• Cookie attribute injection: name/path/domain unescaped in pp_to_header

  Bug
  PerlDancer/Dancer2#1809 · Filter by author bigpresh opened on Sep 10, 2026
  1

• Default error_censor regex too narrow; misses token/api_key/auth/credential

  Bug
  PerlDancer/Dancer2#1808 · Filter by author bigpresh opened on Sep 10, 2026
  1

• Query-string parser truncates values at the second '=' (base64/JWT corruption)

  Bug
  PerlDancer/Dancer2#1806 · Filter by author bigpresh opened on Sep 10, 2026
  2

• send_file: quote/semicolon injection into Content-Disposition filename

  Bug
  PerlDancer/Dancer2#1805 · Filter by author bigpresh opened on Sep 10, 2026

• Serializing a non-reference route return value depends on the installed JSON encoder version

  PerlDancer/Dancer2#1803 · Filter by author bigpresh opened on Aug 20, 2026

• Set-Cookie attribute order is non-deterministic when HTTP::XSCookies is installed

  PerlDancer/Dancer2#1800 · Filter by author bigpresh opened on Aug 6, 2026
  2

• uri_for_route(): review which parameter values are accepted, and what should be URI-escaped

  PerlDancer/Dancer2#1799 · Filter by author bigpresh opened on Aug 6, 2026