This commit is contained in:
Xavier Guimard 2018-01-24 22:29:09 +01:00
parent 6547aaa20c
commit 486b4b0cd9

View File

@ -422,7 +422,7 @@ sub getSkin {
# Check skin GET/POST parameter
my $skinParam = $req->param('skin');
if ( defined $skinParam ) {
if ( $skinParam =~ /^[\w\-]$/ ) {
if ( $skinParam =~ /^[\w\-]+$/ ) {
if ( -d $self->conf->{templateDir} . '/' . $skinParam ) {
$skin = $skinParam;
$self->logger->debug(