diff options
Diffstat (limited to 'LedgerSMB/Form.pm')
| -rwxr-xr-x | LedgerSMB/Form.pm | 3 |
1 files changed, 3 insertions, 0 deletions
diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm index 4b30c317..caa9857b 100755 --- a/LedgerSMB/Form.pm +++ b/LedgerSMB/Form.pm @@ -575,6 +575,9 @@ sub parse_template { $self->{images} = "${LedgerSMB::Sysconfig::images}/$self->{templates}"; if ($self->{language_code}) { + if ($self->{language_code} =~ /(\.\.|\/|\*)/){ + $self->error("Invalid Language Code"); + } if (-f "$self->{templates}/$self->{language_code}/$self->{IN}") { open(IN, '<', "$self->{templates}/$self->{language_code}/$self->{IN}") or $self->error("$self->{IN} : $!"); |