View | Details | Raw Unified | Return to bug 14408
Collapse All | Expand All

(-)a/C4/Auth.pm (-1 / +3 lines)
Lines 157-162 sub get_template_and_user { Link Here
157
    my ( $user, $cookie, $sessionID, $flags );
157
    my ( $user, $cookie, $sessionID, $flags );
158
158
159
    C4::Context->interface( $in->{type} );
159
    C4::Context->interface( $in->{type} );
160
    
161
    my $safe_chars = 'a-zA-Z_\-\/';
162
    die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+.tt?$/ig; #sanitize input
160
163
161
    $in->{'authnotrequired'} ||= 0;
164
    $in->{'authnotrequired'} ||= 0;
162
    my $template = C4::Templates::gettemplate(
165
    my $template = C4::Templates::gettemplate(
163
- 

Return to bug 14408