From 0580342093946f59e8f0f1320f136ad085abe305 Mon Sep 17 00:00:00 2001
From: Liz Rea <wizzyrea@gmail.com>
Date: Wed, 24 Jun 2015 10:10:18 +1200
Subject: [PATCH] Bug 14408 & 14439 - typo fixes for regexes

---
 C4/Auth.pm | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/C4/Auth.pm b/C4/Auth.pm
index 25452892d8..5ffab489c5 100644
--- a/C4/Auth.pm
+++ b/C4/Auth.pm
@@ -157,8 +157,8 @@ sub get_template_and_user {
 
     C4::Context->interface( $in->{type} );
 
-    my $safe_chars = 'a-zA-Z_\-\/';
-    die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+.tt?$/ig; #sanitize input
+    my $safe_chars = 'a-zA-Z0-9_\-\/';
+    die "bad template path" unless $in->{'template_name'} =~ m/^[$safe_chars]+\.tt$/ig; #sanitize input
 
     $in->{'authnotrequired'} ||= 0;
     my $template = C4::Templates::gettemplate(
-- 
2.39.5