id summary reporter owner description type status component version severity resolution keywords cc stage has_patch needs_docs needs_tests needs_better_patch easy ui_ux 29022 HashedFilesMixin does not properly skip protocol-relative urls when STATIC_URL='/' Will Gulian Adam Zapletal "While protocol-relative urls have been deprecated it would be nice for Django staticfiles to support it since a lot of code still uses it or explicitly ''not'' support it. Right now the relevant snippet implies that the code does filter out protocol-relative urls but it currently does not: {{{#!python # django/contrib/staticfiles/storage.py # Ignore absolute/protocol-relative and data-uri URLs. if re.match(r'^[a-z]+:', url): return matched }}} I've included an example snippet that uses a protocol-relative url but is not filtered: {{{#!css @import url(""//fonts.googleapis.com/css?family=Source+Sans+Pro:400,700|Raleway:400,800,900""); }}}" Bug closed contrib.staticfiles 2.0 Normal fixed Ready for checkin 1 0 0 0 0 0