Clarify that request arguments aren't unescaped automatically.

Courtesy of Simon Bertrang. Closes RT#41153.

diff --git a/Changes b/Changes
index c3e90a5..be0ba9a 100644 (file)
--- a/Changes
+++ b/Changes
@@ -1,5 +1,8 @@
 # This file documents the revision history for Perl extension Catalyst.
 
+        - Clarify that request arguments aren't unescaped automatically
+          (Simon Bertrang) (Closes RT#41153)
+
 5.8000_06 2009-02-04 21:00
         - Disallow writing to config after setup (rafl)
         - Disallow calling setup more than once (rafl)

diff --git a/lib/Catalyst/Request.pm b/lib/Catalyst/Request.pm
index 9bda4dc..f0b26ff 100644 (file)
--- a/lib/Catalyst/Request.pm
+++ b/lib/Catalyst/Request.pm
@@ -210,6 +210,9 @@ For example, if your action was
 and the URI for the request was C<http://.../foo/moose/bah>, the string C<bah>
 would be the first and only argument.
 
+Arguments just get passed through and B<don't> get unescaped automatically, so
+you should do that explicitly.
+
 =head2 $req->args
 
 Shortcut for arguments.