Comment 67 for bug 1496277

Revision history for this message
Zane Bitter (zaneb) wrote : Re: template-validate may read server local files (CVE-2015-5295)

And here is a completely untested Icehouse patch.