* fix for possible exploit #13758 * sanetize all external template/config inputs * fix some shellcheck warnings Signed-off-by: Andy Walsh <andy.walsh44+github@gmail.com>