swerc

commit 02afeebf90008a0981e861b085be9fd4e6b5fe6c
parent 399d11e331f815cfae2a0b65349371c06be234ed
Author: uriel@vm41.cat-v.org <unknown>
Date:   Sat,  6 Jun 2009 16:20:02 +0200

Move shared .tpl files to tpl/ from lib/, this fixes a DoS vulneravility where master_template.tpl could be accessed as a standalone .tpl file that recursively called itself.
Diffstat:
M
bin/corehandlers.rc
 | 
2
+-
R
lib/_debug.tpl -> tpl/_debug.tpl
 | 
0

R
lib/_users/login.tpl -> tpl/_users/login.tpl
 | 
0

R
lib/sitemap.tpl -> tpl/sitemap.tpl
 | 
0

4 files changed, 1 insertion(+), 1 deletion(-)
diff --git a/bin/corehandlers.rc b/bin/corehandlers.rc
@@ -92,7 +92,7 @@ fn setup_handlers {
     if not if(test -f $local_path.html)
         handler_body_main=(html_handler $local_path.html)
     # Global tpl (eg sitemap.tpl), should take precedence over txt handler!
-    if not if(test -f lib^$req_path^.tpl)
+    if not if(test -f tpl^$req_path^.tpl)
         handler_body_main=(tpl_handler lib^$req_path^.tpl)
     if not if(test -f $local_path.txt)
         handler_body_main=(txt_handler $local_path.txt)
diff --git a/lib/_debug.tpl b/tpl/_debug.tpl
diff --git a/lib/_users/login.tpl b/tpl/_users/login.tpl
diff --git a/lib/sitemap.tpl b/tpl/sitemap.tpl