id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
26329	StaticFilesStorage permits leading slash, CachedStaticFilesStorage doesn't	Seán Hayes	blighj	"I got the following email from our staging server:

{{{
The joined path (/images/no-image.jpg) is located outside of the base path component (/full-path/collected-static)
}}}

Someone was using the following template tag:

{{{
{% static ""/images/no-image.jpg"" as no_image_url %}
}}}

I checked to see why our tests didn't raise the same error, and it turns out it only happens with CachedStaticFilesStorage (and likely the other manifest storages), StaticFilesStorage and FileSystemStorage seem to just ignore this error.

Since CachedStaticFilesStorage shouldn't be used during testing, I think the parent classes should raise the same error."	Bug	assigned	contrib.staticfiles	1.8	Normal			matt@… Adam Zapletal	Accepted	1	0	0	0	0	0