summaryrefslogtreecommitdiff
path: root/LedgerSMB/Form.pm
diff options
context:
space:
mode:
Diffstat (limited to 'LedgerSMB/Form.pm')
-rwxr-xr-xLedgerSMB/Form.pm8
1 files changed, 8 insertions, 0 deletions
diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm
index bc693ea9..ac3121ae 100755
--- a/LedgerSMB/Form.pm
+++ b/LedgerSMB/Form.pm
@@ -591,6 +591,14 @@ sub parse_template {
my ($self, $myconfig) = @_;
$self->{cwd} = Cwd::getcwd();
+ for (qw(IN OUT)){
+ if ($self->{$_} =~ m#[:/\\]#){
+ $self->error("Access denied");
+ }
+ }
+ if ($self->{language_code} =~ m#[:/\\.*]#){
+ $self->error("Access Denied");
+ }
my ($chars_per_line, $lines_on_first_page, $lines_on_second_page) = (0, 0, 0);
my ($current_page, $current_line) = (1, 1);