prepare release meta info

diff --git a/Changes b/Changes
index 6238e11..7da8859 100644 (file)
--- a/Changes
+++ b/Changes
@@ -1,5 +1,8 @@
 Revision history for Perl extension Catalyst::Plugin::Session
 
+0.41 2018-12-05
+      - Don't let an evil session ID supplier have an easy XSS vector (Michael McClimon++)
+
 0.40 2015-01-26
       - Add a flag so that a storage can finalize during finalize_header rather
       than finalize_body.  This is to enable storages that need to write to the

diff --git a/Makefile.PL b/Makefile.PL
index a9beeef..3700c20 100644 (file)
--- a/Makefile.PL
+++ b/Makefile.PL
@@ -23,6 +23,7 @@ requires 'Object::Signature';
 requires 'MRO::Compat';
 requires 'MooseX::Emulate::Class::Accessor::Fast' => '0.00801';
 requires 'Moose' => '0.76';
+requires 'HTML::Entities';
 
 # an indirect dep. needs a certain version.
 requires 'Tie::RefHash' => '1.34';

diff --git a/lib/Catalyst/Plugin/Session.pm b/lib/Catalyst/Plugin/Session.pm
index 0a2e5ef..345297f 100644 (file)
--- a/lib/Catalyst/Plugin/Session.pm
+++ b/lib/Catalyst/Plugin/Session.pm
@@ -15,7 +15,7 @@ use List::Util qw/ max /;
 
 use namespace::clean -except => 'meta';
 
-our $VERSION = '0.40';
+our $VERSION = '0.41';
 $VERSION = eval $VERSION;
 
 my @session_data_accessors; # used in delete_session
@@ -671,7 +671,7 @@ sub set_session_id { shift->maybe::next::method(@_) }
 sub delete_session_id { shift->maybe::next::method(@_) }
 sub extend_session_id { shift->maybe::next::method(@_) }
 
-__PACKAGE__;
+__PACKAGE__->meta->make_immutable;
 
 __END__