[TYPO3-core] RFC #15772 bug: template::getHtmlTemplate() doesn't allow absolute file paths

[Peter Russ]

--- Original Nachricht ---
Absender:   Jigal van Hemert
Datum:       28.09.2010 09:41:
> Hi,
>
> This is a SVN patch request.
>
> Type: Bugfix / Tweak
>
> BT reference: http://bugs.typo3.org/view.php?id=15772
>
> Branches: trunk (older branches if RM sees it fit)
>
> Problem:
> template::getHhtmlTemplate() only allows templates which are relative 
> to PATH_typo3 or relative to an extension (using the EXT: prefix)
>
> Solution:
> Add the possibility to use absolute paths. This path is checked 
> against the allowed absolute path (lockRootPath).
>
> How to test:
> In a BE module in the main() function the template is usually loaded 
> with:
> $this->doc->setModuleTemplate( <filename> );
> This calls getHtmlTemplate internally. Providing an absolute path 
> which is inside the lockRootPath works after the patch.
>
> Note:
> This is a modification of the original patch by Peter Russ which can 
> be found in the bugtracker issue.
> http://lists.typo3.org/cgi-bin/mailman/listinfo/typo3-team-core

+1 Thank you for the improvement, which makes it more secure in a vhost 
enviroment!