From 89b28c317e93617880a29afd9e143504138486b4 Mon Sep 17 00:00:00 2001 From: Rushabh Mehta Date: Wed, 31 Jan 2018 10:51:51 +0530 Subject: [PATCH] [security] exclude python files from being seen directly (#4942) --- frappe/website/render.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/frappe/website/render.py b/frappe/website/render.py index b123d3e506..67391c2c43 100644 --- a/frappe/website/render.py +++ b/frappe/website/render.py @@ -80,7 +80,7 @@ def is_static_file(path): if ('.' not in path): return False extn = path.rsplit('.', 1)[-1] - if extn in ('html', 'md', 'js', 'xml', 'css', 'txt'): + if extn in ('html', 'md', 'js', 'xml', 'css', 'txt', 'py'): return False for app in frappe.get_installed_apps():