Resources fails to load outside "res" folder about remi

[dddomodossola]

@nzjrs This seems to be generated by the regular expressions. Maybe this is specifically wanted because of security reasons. But we have to consider that, if the /res folder is part of the library and we have different apps using the library, should all apps insert their resources in the library path? How we can manage this?

[nzjrs]

We could whitelist a local location in the Server constructor

s = Server(local_base='/foo') and then only serve res files relative to that base?

[dddomodossola]

@nzjrs it seems to be a good idea. The default value could be the app path. But what about the regex? I do not figure out how to make this in the best way..

[nzjrs]

I guess first decide on the design, then the regex. What do you want the design to be?

[dddomodossola]

I like the whitelist idea. I think that it should contain as default the library /res folder and the actual execution path of the application. As additional parameter (in the start function call) it could be possible to add a list() of directories.

[nzjrs]

This should be fixed with

35ce4c0