|
Lines 158-163
sub get_template_and_user {
Link Here
|
| 158 |
|
158 |
|
| 159 |
C4::Context->interface( $in->{type} ); |
159 |
C4::Context->interface( $in->{type} ); |
| 160 |
|
160 |
|
|
|
161 |
# Sanitize template path to avoid path traversal |
| 162 |
$in->{template_name} =~ s|^/||; |
| 163 |
$in->{template_name} =~ s|\.\.||g; |
| 164 |
|
| 161 |
$in->{'authnotrequired'} ||= 0; |
165 |
$in->{'authnotrequired'} ||= 0; |
| 162 |
my $template = C4::Templates::gettemplate( |
166 |
my $template = C4::Templates::gettemplate( |
| 163 |
$in->{'template_name'}, |
167 |
$in->{'template_name'}, |
| 164 |
- |
|
|