Re: static files suspicious operation, os error, and list of paths

On Tue, Jul 12, 2016 at 12:40:11AM -0700, Malik Rumi wrote:
> UPDATE:
>
> I got it back to where runserver comes up and I get no errors, but the
> staticfiles are still not being served.
>
>
> The paths are in the right *format* to satisfy the STATICFILES_DIR in
> SETTINGS, and so that they can be *found*, according to debug toolbar, and
> they *pass* the checks in runserver, collectstatic, and findstatic, but not
> so they can be *used*.
>
>
> I have to assume that safe_join is still running around somewhere in the
> background, even though it is now failing silently.
>
>
> I need to make safe join see these paths the same way it saw the single
> file bootstrap.css when it passed findstatic, but I don't know how to do
> that.
>
>
> One could ask why I get all those 404's from runserver, but I think that's
> explained by the fact that safe_join is still blocking them.
>
> Ideas?

Could you please post all the settings that are in any way related to
static files in full? That means things like STATICFILES_*, and
everything that's used in those (like BASE_DIR, etc). Please, don't
leave any part of them out. If you are not certain, just post the
entire settings module, only remove secret values.

Also, could you provide the exact URL of a request that is resulting
in a SuspiciousFileOperation, including a full traceback?

Based on the error message you posted in the initial post, it looks
like somewhere, you're calling ``os.path.join(a, b)``, where the
second argument starts with a slash – that might be the reason, but
it's hard to tell whether this is the case, because you haven't shown
us the full settings.

Cheers,

Michal

--
You received this message because you are subscribed to the Google Groups "Django users" group.
To unsubscribe from this group and stop receiving emails from it, send an email to django-users+unsubscribe@googlegroups.com.
To post to this group, send email to django-users@googlegroups.com.
Visit this group at https://groups.google.com/group/django-users.
To view this discussion on the web visit https://groups.google.com/d/msgid/django-users/20160712100323.GK22177%40koniiiik.org.
For more options, visit https://groups.google.com/d/optout.