Ensure template string does not contain slashes

cs278 · Jan 24, 2016 · d6bf280 · d6bf280
1 parent 34f789b
commit d6bf280
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/src/functions.php b/src/functions.php
@@ -82,6 +82,10 @@ function pathTemplate($template)
         $useRandomInt = function_exists('random_int');
     }
 
+    if (false !== strpos($template, '\\') || false !== strpos($template, '/')) {
+        throw new \InvalidArgumentException('Template must not contain back or forward slashes');
+    }
+
     $len = 0;
 
     if (false !== $pos = strrpos($template, 'X')) {