#27201: Django 1.10 with STATICFILES_STORAGE breaks on absolute path in CSS with
double slash
-------------------------------------+--------------------
Reporter: andrewbadr | Owner: nobody
Type: Bug | Status: new
Component: contrib.staticfiles | Version: 1.10
Severity: Normal | Keywords:
Triage Stage: Unreviewed | Has patch: 0
Easy pickings: 0 | UI/UX: 0
-------------------------------------+--------------------
After upgrading Django to 1.10, my `manage.py collectstatic` command broke
with an error like this one:
`django.core.exceptions.SuspiciousFileOperation: The joined path
(/fonts/crimson/CrimsonText-Bold.ttf) is located outside of the base path
component (/Users/andrew/tmp/verse_collectstatic_test/_staticfiles)`
Downgrading to Django 1.9 fixes the issue (`collectstatic` runs
successfully), as does removing the line `STATICFILES_STORAGE =
'django.contrib.staticfiles.storage.ManifestStaticFilesStorage'` from my
settings.py. The static file it is attempting to process in the above
example is a .css file containing:
{{{
@font-face {
font-family: "Crimson";
src: url("/static//fonts/crimson/CrimsonText-Bold.ttf");
font-weight: bold;
}
}}}
Note the double slash in the font path. This is a typo, but it is not a
syntactic or semantic error, and it worked fine before. It runs fine if I
fix the double-slash. This is an easy workaround, but I am filing this
issue because it may be tricky for other users to diagnose, and because
there may be some more dangerous underlying bug.
--
Ticket URL: <https://code.djangoproject.com/ticket/27201>
Django <https://code.djangoproject.com/>
The Web framework for perfectionists with deadlines.
--
You received this message because you are subscribed to the Google Groups
"Django updates" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to django-updates+unsubscr...@googlegroups.com.
To post to this group, send email to django-updates@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/django-updates/053.1f4349dbc8f5f1a3da06b5e8a0edac8a%40djangoproject.com.
For more options, visit https://groups.google.com/d/optout.
