id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
36348	ManifestStaticFilesStorage breaks CSS containing data: URIs with multiple nested url()s	Samuel Cormier-Iijima	Samuel Cormier-Iijima	"Consider a CSS file containing the following:

{{{
a {
  background-image: url(""data:image/svg+xml;charset=utf-8,filter='url(%23b)' filter='url(%23c)'"");
}
}}}

When this is processed by ManifestStaticFilesStorage, the output is this:

{{{
a {
  background-image: url(""data:image/svg+xml;charset=utf-8,filter='url(%23b)' filter='url(""#c"")'"");
}
}}}

Notice that the second url() has been changed and now contains a double quote, which is invalid. The entire data: URI should be left as-is, but the regex in the CSS replacement patterns does not account for this case and sees the closing paren of the first nested url() as the end."	Bug	closed	contrib.staticfiles	5.2	Normal	fixed		Adam Johnson Claude Paroz Adam Zapletal	Ready for checkin	1	0	0	0	0	0