sanitize load_text() path

CrowCpp · Feb 8, 2022 · 6ad0684 · 6ad0684
1 parent 155cf75
commit 6ad0684
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/include/crow/mustache.h b/include/crow/mustache.h
@@ -632,7 +632,9 @@ namespace crow
 
         inline std::string load_text(const std::string& filename)
         {
-            return detail::get_loader_ref()(filename);
+            std::string filename_sanitized(filename);
+            utility::sanitize_filename(filename_sanitized);
+            return detail::get_loader_ref()(filename_sanitized);
         }
 
         inline template_t load(const std::string& filename)