tedkulp/PrivateBin
1
0
Fork 0
mirror of https://github.com/PrivateBin/PrivateBin.git synced 2026-04-19 21:58:08 -04:00
Code Issues Packages Projects Releases Wiki Activity

prevent use of paths in template names, only file names inside tpl directory are allowed

Browse Source
This commit is contained in:
El RIDO
2025-11-10 12:23:50 +01:00
parent fd6ba6595f
commit 4ac8ffa2a4
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
lib/View.php
+1 -1
View File
@@ -66,7 +66,7 @@ class View
*/
public static function getTemplateFilePath(string $template): string
{
$file = self::isBootstrapTemplate($template) ? 'bootstrap' : $template;
$file = self::isBootstrapTemplate($template) ? 'bootstrap' : basename($template);
return PATH . 'tpl' . DIRECTORY_SEPARATOR . $file . '.php';
}