View | Details | Raw Unified | Return to bug 14408
Collapse All | Expand All

(-)a/C4/Auth.pm (-1 / +4 lines)
Lines 158-163 sub get_template_and_user { Link Here
158
158
159
    C4::Context->interface( $in->{type} );
159
    C4::Context->interface( $in->{type} );
160
160
161
    # Sanitize template path to avoid path traversal
162
    $in->{template_name} =~ s|^/||;
163
    $in->{template_name} =~ s|\.\.||g;
164
161
    $in->{'authnotrequired'} ||= 0;
165
    $in->{'authnotrequired'} ||= 0;
162
    my $template = C4::Templates::gettemplate(
166
    my $template = C4::Templates::gettemplate(
163
        $in->{'template_name'},
167
        $in->{'template_name'},
164
- 

Return to bug 14408