id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
29022	HashedFilesMixin does not properly skip protocol-relative urls when STATIC_URL='/'	Will Gulian	Adam Zapletal	"While protocol-relative urls have been deprecated it would be nice for Django staticfiles to support it since a lot of code still uses it or explicitly ''not'' support it. Right now the relevant snippet implies that the code does filter out protocol-relative urls but it currently does not:
{{{#!python
# django/contrib/staticfiles/storage.py

# Ignore absolute/protocol-relative and data-uri URLs.
if re.match(r'^[a-z]+:', url):
    return matched
}}}

I've included an example snippet that uses a protocol-relative url but is not filtered:

{{{#!css
 @import url(""//fonts.googleapis.com/css?family=Source+Sans+Pro:400,700|Raleway:400,800,900"");
  }}}"	Bug	closed	contrib.staticfiles	2.0	Normal	fixed			Ready for checkin	1	0	0	0	0	0