X-Git-Url: https://git.mxchange.org/?a=blobdiff_plain;f=mod%2Fview.php;h=6f23d84dc45f776627578a8f5413f528cbfaadad;hb=708ffaff51d3f5112af6b1fbd25d7ff6391e496e;hp=f4f1692cb6ffdfcdb9b9689c620191ff001c6e08;hpb=169e9b0fc5601164d2f9cc2aabd07ee70aeba68d;p=friendica.git

diff --git a/mod/view.php b/mod/view.php
index f4f1692cb6..6f23d84dc4 100644
--- a/mod/view.php
+++ b/mod/view.php
@@ -1,6 +1,7 @@
 <?php
 
 use Friendica\App;
+use Friendica\Util\Strings;
 
 /**
  * load view/theme/$current_theme/style.php with friendica context
@@ -10,14 +11,17 @@ use Friendica\App;
 function view_init(App $a)
 {
 	header("Content-Type: text/css");
-		
-	if ($a->argc == 4){
+
+	if ($a->argc == 4) {
 		$theme = $a->argv[2];
+		$theme = Strings::sanitizeFilePathItem($theme);
+
 		// set the path for later use in the theme styles
 		$THEMEPATH = "view/theme/$theme";
-		if(file_exists("view/theme/$theme/style.php"))
+		if (file_exists("view/theme/$theme/style.php")) {
 			require_once("view/theme/$theme/style.php");
+		}
 	}
-	
+
 	exit();
 }