From 961666a82601b6be4865ea6380ae8eda85f4305a Mon Sep 17 00:00:00 2001
From: einhverfr <einhverfr@4979c152-3d1c-0410-bac9-87ea11338e46>
Date: Thu, 22 Mar 2007 04:53:46 +0000
Subject: Adding protection against ADS for Windows users in parse template
 routines

git-svn-id: https://ledger-smb.svn.sourceforge.net/svnroot/ledger-smb/branches/1.2@979 4979c152-3d1c-0410-bac9-87ea11338e46
---
 LedgerSMB/Form.pm | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'LedgerSMB')

diff --git a/LedgerSMB/Form.pm b/LedgerSMB/Form.pm
index bc693ea9..ac3121ae 100755
--- a/LedgerSMB/Form.pm
+++ b/LedgerSMB/Form.pm
@@ -591,6 +591,14 @@ sub parse_template {
 	my ($self, $myconfig) = @_;
 
 	$self->{cwd} = Cwd::getcwd();
+	for (qw(IN OUT)){
+		if ($self->{$_} =~ m#[:/\\]#){
+			$self->error("Access denied");
+		}
+	}
+	if ($self->{language_code} =~ m#[:/\\.*]#){
+		$self->error("Access Denied");
+	}
 
 	my ($chars_per_line, $lines_on_first_page, $lines_on_second_page) = (0, 0, 0);
 	my ($current_page, $current_line) = (1, 1);
-- 
cgit v1.2.3