This file is indexed.

/usr/share/horde/nag/templates/data/import.inc is in php-horde-nag 4.2.7-1ubuntu1.

This file is owned by root:root, with mode 0o644.

The actual contents of the file can be viewed below.

 1
 2
 3
 4
 5
 6
 7
 8
 9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
<form method="post" name="import_form" enctype="multipart/form-data" action="data.php">
<?php Horde_Util::pformInput() ?>
<input type="hidden" name="actionID" value="<?php echo htmlspecialchars($next_step) ?>" />
<input type="hidden" name="import_step" value="<?php echo (int)$import_step ?>" />

<h1 class="header">
 <?php printf(_("Import Tasks, Step %d"), (int)$import_step) ?>
</h1>

<div class="horde-content">
 <p>
  <?php echo Horde::label('import_format', _("Select the format of the source file:")) ?><br />
  <select id="import_format" name="import_format">
   <option value="csv">CSV</option>
   <option value="vtodo">iCalendar (vTodo)</option>
  </select>
 </p>

<?php if (!$prefs->isLocked('default_tasklist') && count($import_tasklists) > 1): ?>
 <p>
  <?php echo Horde::label('tasklist_target', _("Which task list should the tasks be added to?")) ?><br />
  <select id="tasklist_target" name="tasklist_target">
  <?php
  $default = Nag::getDefaultTasklist(Horde_Perms::EDIT);
  foreach ($import_tasklists as $id => $tasklist) {
      $sel = ($id == $default) ? ' selected="selected"' : '';
      printf('<option value="%s"%s>%s</option>',
             htmlspecialchars($id), $sel, htmlspecialchars(Nag::getLabel($tasklist))) . "\n";
  } ?>
  </select>
 </p>
<?php else: ?>
 <input type="hidden" name="tasklist_target" value="<?php echo htmlspecialchars(Nag::getDefaultTasklist(Horde_Perms::EDIT)) ?>" />
<?php endif; ?>
 <p>
  <?php echo Horde::label('import_file', _("Select the file to import:")) ?><br />
  <input type="file" id="import_file" name="import_file" size="40" />
 </p>
</div>

<div class="horde-form-buttons">
 <input type="submit" value="<?php echo _("Next") ?>" class="horde-default" />
</div>

</form>