Security warning for an issue in the StaticController - still unfixed

application/controllers/StaticController.php

@@ -61,6 +61,7 @@ class StaticController extends ActionController
     public function imgAction()
     {
         $module = $this->_getParam('module_name');
+        // TODO: This is more than dangerous, must be fixed!!
         $file   = $this->_getParam('file');
 
         $basedir = Icinga::app()->getModuleManager()->getModule($module)->getBaseDir();