diff --git a/datasette/utils/asgi.py b/datasette/utils/asgi.py index 1699847e16..3d52058b4c 100644 --- a/datasette/utils/asgi.py +++ b/datasette/utils/asgi.py @@ -2,7 +2,7 @@ import json from datasette.utils import MultiParams, calculate_etag from mimetypes import guess_type -from urllib.parse import parse_qs, urlunparse, parse_qsl +from urllib.parse import parse_qs, urlunparse, parse_qsl, unquote from pathlib import Path from http.cookies import SimpleCookie, Morsel import aiofiles @@ -318,7 +318,7 @@ async def inner_static(request, send): path = request.scope["url_route"]["kwargs"]["path"] headers = static_headers.copy() try: - full_path = (root_path / path).resolve().absolute() + full_path = (root_path / unquote(path)).resolve().absolute() except FileNotFoundError: await asgi_send_html(send, "404: Directory not found", 404) return diff --git a/tests/test_html.py b/tests/test_html.py index 4d95a8fa07..805797d656 100644 --- a/tests/test_html.py +++ b/tests/test_html.py @@ -116,6 +116,14 @@ def test_static_mounts(): ) as client: response = client.get("/custom-static/test_html.py") assert response.status_code == 200 + response = client.get( + "/custom-static/test_templates/pages/nested/filename with spaces" + ) + assert response.status_code == 200 + response = client.get( + "/custom-static/test_templates/pages/topic_{topic}/{slug}.html" + ) + assert response.status_code == 200 response = client.get("/custom-static/not_exists.py") assert response.status_code == 404 response = client.get("/custom-static/../LICENSE") diff --git a/tests/test_templates/pages/nested/filename with spaces b/tests/test_templates/pages/nested/filename with spaces new file mode 100644 index 0000000000..e69de29bb2