@@ -, +, @@ - prove t/db_dependent/Auth.t --- C4/Auth.pm | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) --- a/C4/Auth.pm +++ a/C4/Auth.pm @@ -159,7 +159,7 @@ sub get_template_and_user { C4::Context->interface( $in->{type} ); my $safe_chars = 'a-zA-Z0-9_\-\/'; - die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+.tt?$/ig; #sanitize input + die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+\.tt$/ig; #sanitize input $in->{'authnotrequired'} ||= 0; my $template = C4::Templates::gettemplate( --