Recently I found a gotcha with the following code:

my $tt = new Template({ COMPILE_DIR => 'ttc', INCLUDE_PATH => '../tt'] });

This code attempts to store compiled templates in ttc/../tt, which, depending on the circumstances, may lead to anything from security hole to the dataloss (if, by any chance, the script will have enough permissions to actually write to this path).

I am not sure whether to classify this as 'bug' or 'as designed', but I think this problem deserves at least a mention in
Manual/Config.html#Caching_and_Compiling_Options
---
Professional hosting for everyone - http://www.host.ru


_______________________________________________
templates mailing list
[EMAIL PROTECTED]
http://lists.template-toolkit.org/mailman/listinfo/templates

Reply via email to