让模板设计者不能操作系统文件

• We don't want template designers to have access to system files