diff --git a/classes/template/TemplateHandler.class.php b/classes/template/TemplateHandler.class.php
index 86d77e155..ae04423a0 100644
--- a/classes/template/TemplateHandler.class.php
+++ b/classes/template/TemplateHandler.class.php
@@ -93,6 +93,7 @@ class TemplateHandler
 	{
 		// verify arguments
 		$tpl_path = trim(preg_replace('@^' . preg_quote(\RX_BASEDIR, '@') . '|\./@', '', str_replace('\\', '/', $tpl_path)), '/') . '/';
+		$tpl_path = preg_replace('/[\{\}\(\)\[\]<>\$\'"]/', '', $tpl_path);
 		if($tpl_path === '/')
 		{
 			$tpl_path = '';