bitPickups/friendica_2020-09-1_sharedHosting
1
0
Fork 0
Code Pull requests Activity

Sanitize theme path items

Browse source 
- Sanitize theme style/color/scheme path items
This commit is contained in:
Hypolite Petovan 2019-03-31 21:50:00 -04:00
commit b529c03a20
9 changed files with 65 additions and 50 deletions
Download patch file Download diff file Expand all files Collapse all files

6
view/theme/frio/style.php
View file

@ -5,9 +5,11 @@
use Friendica\Core\Config;
use Friendica\Core\PConfig;
use Friendica\Util\Strings;
require_once 'view/theme/frio/php/PHPColors/Color.php';
$scheme = '';
$schemecss = '';
$schemecssfile = false;
$scheme_modified = 0;
@ -67,9 +69,7 @@ if (!empty($_REQUEST['scheme'])) {
$scheme = $_REQUEST['scheme'];
}
// Sanitize the data.
$scheme = !empty($scheme) ? basename($scheme) : '';
$scheme = Strings::sanitizeFilePathItem($scheme);
if (($scheme) && ($scheme != '---')) {
if (file_exists('view/theme/frio/scheme/' . $scheme . '.php')) {