Move mod/home to src/Module/Home

[friendica.git] / mod / view.php

diff --git a/mod/view.php b/mod/view.php
index f4f1692cb6ffdfcdb9b9689c620191ff001c6e08..6f23d84dc45f776627578a8f5413f528cbfaadad 100644 (file)
--- a/mod/view.php
+++ b/mod/view.php
@@ -1,6 +1,7 @@
 <?php
 
 use Friendica\App;
+use Friendica\Util\Strings;
 
 /**
  * load view/theme/$current_theme/style.php with friendica context
@@ -10,14 +11,17 @@ use Friendica\App;
 function view_init(App $a)
 {
        header("Content-Type: text/css");
-               
-       if ($a->argc == 4){
+
+       if ($a->argc == 4) {
                $theme = $a->argv[2];
+               $theme = Strings::sanitizeFilePathItem($theme);
+
                // set the path for later use in the theme styles
                $THEMEPATH = "view/theme/$theme";
-               if(file_exists("view/theme/$theme/style.php"))
+               if (file_exists("view/theme/$theme/style.php")) {
                        require_once("view/theme/$theme/style.php");
+               }
        }
-       
+
        exit();
 }