View | Details | Raw Unified | Return to bug 14408
Collapse All | Expand All

(-)a/C4/Auth.pm (-3 / +2 lines)
Lines 157-164 sub get_template_and_user { Link Here
157
157
158
    C4::Context->interface( $in->{type} );
158
    C4::Context->interface( $in->{type} );
159
159
160
    my $safe_chars = 'a-zA-Z_\-\/';
160
    my $safe_chars = 'a-zA-Z0-9_\-\/';
161
    die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+.tt?$/ig; #sanitize input
161
    die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+\.tt$/ig; #sanitize input
162
162
163
    $in->{'authnotrequired'} ||= 0;
163
    $in->{'authnotrequired'} ||= 0;
164
    my $template = C4::Templates::gettemplate(
164
    my $template = C4::Templates::gettemplate(
165
- 

Return to bug 14408