11c93f0a3b
This logic is called via {% include %} (fixed) and as a custom .htm driver for View::make (broken). The previous change was too aggressive and broke the latter. This still fixes arbitrary file inclusion whilst retaining the original design. Both logic paths are now fixed and have been tested
|
||
|---|---|---|
| .. | ||
| assets | ||
| behaviors | ||
| classes | ||
| console | ||
| controllers | ||
| database | ||
| helpers | ||
| lang | ||
| models | ||
| partials | ||
| reportwidgets | ||
| traits | ||
| twig | ||
| views | ||
| ServiceProvider.php | ||
| aliases.php | ||
| composer.json | ||
| providers.php | ||
| routes.php | ||