sub load { my $self = shift; my $conf = $self->conf; my $query = $self->query; my @tainted_dirs = File::Spec->splitdir( $query->{dir} ); my ($tainted_page_volume,$tainted_page_path,$tainted_page_file) = File::Spec->splitpath( $query->{page} ); my @tainted_page_dirs = File::Spec->splitdir( $tainted_page_path ); no locale; # untaint dir my @untainted_dirs; foreach (@tainted_dirs) { if (m/^([\w.-]+)$/) { push (@untainted_dirs, "$1") ; } elsif ($_) { croak ("TAINTED DIR PARAM: $_: $!"); } } my @untainted_page_dirs; foreach (@tainted_page_dirs) { if (m/^([\w.-]+)$/) { push (@untainted_page_dirs, "$1") ; } elsif ($_) { croak ("TAINTED PAGE DIR PARAM: $_: $!"); } } my $untainted_page_file; if ($tainted_page_file and $tainted_page_file=~ m/^([\w.-]+)$/) { $untainted_page_file = $1; } else { croak ("TAINTED PAGE FILE PARAM: $tainted_page_file: $!"); } my $template_file = File::Spec->catfile( $conf->{templates}, @untainted_dirs, @untainted_page_dirs, $untainted_page_file . $conf->{template_extension}, ); my $template = do $template_file or croak "Failed to load template file [$template_file] ($!) ($@)"; return $self->template( $template ); }