Merge pull request #647 from r0fls/645

use absolute path in static root
This commit is contained in:
Raphael Deem 2017-04-16 22:06:40 -07:00 committed by GitHub
commit 7e9b65feca

View File

@ -56,7 +56,7 @@ def register(app, uri, file_or_directory, pattern,
# URL decode the path sent by the browser otherwise we won't be able to
# match filenames which got encoded (filenames with spaces etc)
file_path = path.abspath(unquote(file_path))
if not file_path.startswith(root_path):
if not file_path.startswith(path.abspath(unquote(root_path))):
raise FileNotFound('File not found',
path=file_or_directory,
relative_url=file_uri)