From e0d2bc669e385cfd1c42c1e83aaff3495a75a822 Mon Sep 17 00:00:00 2001 From: Kyle M Hall Date: Thu, 25 Jun 2015 16:41:23 -0400 Subject: [PATCH] Bug 14467: Security updates break some Koha plugins The new security updates break previously functioning plugins, most notably the cover flow plugin and the Ebsco EDS plugin. Test Plan: 1) Install and configure the cover flow plugin ( http://bywatersolutions.com/koha-plugins/ ) 2) Note that attempting to access coverflow.pl from the OPAC results in an error 3) Apply this patch 4) Note that coverflow.pl now output html again Signed-off-by: Nick Clemens Signed-off-by: Jonathan Druart Signed-off-by: Tomas Cohen Arazi --- Koha/Plugins/Base.pm | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/Koha/Plugins/Base.pm b/Koha/Plugins/Base.pm index f60343a9fe..55e1e7b5c6 100644 --- a/Koha/Plugins/Base.pm +++ b/Koha/Plugins/Base.pm @@ -20,6 +20,7 @@ package Koha::Plugins::Base; use Modern::Perl; use Module::Pluggable require => 1; +use Cwd qw(abs_path); use base qw{Module::Bundled::Files}; @@ -106,7 +107,7 @@ sub get_template { require C4::Auth; my ( $template, $loggedinuser, $cookie ) = C4::Auth::get_template_and_user( - { template_name => $self->mbf_path( $args->{'file'} ), + { template_name => abs_path( $self->mbf_path( $args->{'file'} ) ), query => $self->{'cgi'}, type => "intranet", authnotrequired => 1, -- 2.39.5