Mirrors/PrivateBin
1
0
Fork 0
mirror of https://github.com/PrivateBin/PrivateBin.git synced 2026-01-23 02:35:23 +00:00
Code Issues Projects Releases Wiki Activity

prevent use of paths in template names, only file names inside tpl directory are allowed

Browse source
This commit is contained in:
El RIDO 2025-11-10 12:23:50 +01:00
parent 13949349af
commit 17ff44037a
No known key found for this signature in database
GPG key ID: 0F5C940A6BD81F92
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
lib/View.php
View file

@ -66,7 +66,7 @@ class View
*/
public static function getTemplateFilePath(string $template): string
{
$file = self::isBootstrapTemplate($template) ? 'bootstrap' : $template;
$file = self::isBootstrapTemplate($template) ? 'bootstrap' : basename($template);
return PATH . 'tpl' . DIRECTORY_SEPARATOR . $file . '.php';
}