#27201: Django 1.10 with STATICFILES_STORAGE breaks on absolute path in CSS with double slash -------------------------------------+-------------------- Reporter: andrewbadr | Owner: nobody Type: Bug | Status: new Component: contrib.staticfiles | Version: 1.10 Severity: Normal | Keywords: Triage Stage: Unreviewed | Has patch: 0 Easy pickings: 0 | UI/UX: 0 -------------------------------------+-------------------- After upgrading Django to 1.10, my `manage.py collectstatic` command broke with an error like this one:
`django.core.exceptions.SuspiciousFileOperation: The joined path (/fonts/crimson/CrimsonText-Bold.ttf) is located outside of the base path component (/Users/andrew/tmp/verse_collectstatic_test/_staticfiles)` Downgrading to Django 1.9 fixes the issue (`collectstatic` runs successfully), as does removing the line `STATICFILES_STORAGE = 'django.contrib.staticfiles.storage.ManifestStaticFilesStorage'` from my settings.py. The static file it is attempting to process in the above example is a .css file containing: {{{ @font-face { font-family: "Crimson"; src: url("/static//fonts/crimson/CrimsonText-Bold.ttf"); font-weight: bold; } }}} Note the double slash in the font path. This is a typo, but it is not a syntactic or semantic error, and it worked fine before. It runs fine if I fix the double-slash. This is an easy workaround, but I am filing this issue because it may be tricky for other users to diagnose, and because there may be some more dangerous underlying bug. -- Ticket URL: <https://code.djangoproject.com/ticket/27201> Django <https://code.djangoproject.com/> The Web framework for perfectionists with deadlines. -- You received this message because you are subscribed to the Google Groups "Django updates" group. To unsubscribe from this group and stop receiving emails from it, send an email to django-updates+unsubscr...@googlegroups.com. To post to this group, send email to django-updates@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/django-updates/053.1f4349dbc8f5f1a3da06b5e8a0edac8a%40djangoproject.com. For more options, visit https://groups.google.com/d/optout.