[TO CLOSE] Render any file contained in /templates


#1

The following routes :
sylius_shop_partial_taxon_index_by_code
sylius_shop_partial_taxon_show_by_slug

Allows someone to load/display any file contained in “/templates”.
/templates/bundles/toto.html.twig for instance.

Example:
http://localhost:8000/_partial/taxons/by-code/category?template=bundles/titi.txt
(show the content of templates/bundles/titi.txt).

S%C3%A9lection_999(125)


#2

My bad I close this topic. It’s only available in localhost… I didnt read the security file.