Lines 158-163
sub get_template_and_user {
Link Here
|
158 |
|
158 |
|
159 |
C4::Context->interface( $in->{type} ); |
159 |
C4::Context->interface( $in->{type} ); |
160 |
|
160 |
|
|
|
161 |
# Sanitize template path to avoid path traversal |
162 |
$in->{template_name} =~ s|^/||; |
163 |
$in->{template_name} =~ s|\.\.||g; |
164 |
|
161 |
$in->{'authnotrequired'} ||= 0; |
165 |
$in->{'authnotrequired'} ||= 0; |
162 |
my $template = C4::Templates::gettemplate( |
166 |
my $template = C4::Templates::gettemplate( |
163 |
$in->{'template_name'}, |
167 |
$in->{'template_name'}, |
164 |
- |
|
|