Bug 14408 (3.16/3.14) regex fix for .tmpl files too

(cherry picked from commit 04d1d375b1)
Signed-off-by: Fridolin Somers <fridolin.somers@biblibre.com>
This commit is contained in:
Mason James 2015-06-25 06:38:30 +12:00 committed by Fridolin Somers
parent c3d5ded6ec
commit defbfa2907
2 changed files with 2 additions and 2 deletions

View File

@ -140,7 +140,7 @@ sub get_template_and_user {
my ( $user, $cookie, $sessionID, $flags );
my $safe_chars = 'a-zA-Z0-9_\-\/';
die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+.tt?$/ig; #sanitize input
die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+\.(tt$|tmpl$)/ig; #sanitize input
$in->{'authnotrequired'} ||= 0;
my $template = C4::Templates::gettemplate(

View File

@ -8,7 +8,7 @@ use Modern::Perl;
use CGI;
use Test::MockModule;
use List::MoreUtils qw/all any none/;
use Test::More tests => 6;
use Test::More tests => 10;
use Test::Warn;
use C4::Members;
use Koha::AuthUtils qw/hash_password/;