Merge pull request #647 from r0fls/645

use absolute path in static root
This commit is contained in:
Raphael Deem
2017-04-16 22:06:40 -07:00
committed by GitHub

View File

@@ -56,7 +56,7 @@ def register(app, uri, file_or_directory, pattern,
# URL decode the path sent by the browser otherwise we won't be able to
# match filenames which got encoded (filenames with spaces etc)
file_path = path.abspath(unquote(file_path))
if not file_path.startswith(root_path):
if not file_path.startswith(path.abspath(unquote(root_path))):
raise FileNotFound('File not found',
path=file_or_directory,
relative_url=file_uri)