diff --git a/core/lib/Thelia/Core/Template/Smarty/SmartyParser.php b/core/lib/Thelia/Core/Template/Smarty/SmartyParser.php index 868f1570c..b6c1ed1b7 100755 --- a/core/lib/Thelia/Core/Template/Smarty/SmartyParser.php +++ b/core/lib/Thelia/Core/Template/Smarty/SmartyParser.php @@ -212,14 +212,14 @@ class SmartyParser extends Smarty implements ParserInterface $templateDir = realpath(THELIA_TEMPLATE_DIR . rtrim($this->template, "/") . "/"); if (strpos($pathFileName, $templateDir) !== 0) { - throw new ResourceNotFoundException(sprintf("'%s' view does not exists", $file)); + throw new ResourceNotFoundException(sprintf("'%s' view does not exists", htmlspecialchars($file))); } if (!file_exists($fileName)) { $fileName .= ".html"; if (!file_exists($fileName)) { - throw new ResourceNotFoundException(sprintf("'%s' file not found in %s template", $file, $this->template)); + throw new ResourceNotFoundException(sprintf("'%s' file not found in %s template", htmlspecialchars($file), $this->template)); } } diff --git a/templates/default/layout.tpl b/templates/default/layout.tpl index 2c8a56d44..0f01dfc78 100644 --- a/templates/default/layout.tpl +++ b/templates/default/layout.tpl @@ -28,7 +28,7 @@ URL: http://www.thelia.net {block name="meta"}{/block} - {stylesheets file='assets/less/styles.less' filters='less,cssembed'} + {stylesheets file='assets/less/styles.less' filters='less,cssembed,cssrewrite'} {/stylesheets} {debugbar_rendercss}