Index: openacs-4/packages/acs-api-browser/tcl/acs-api-documentation-procs.tcl =================================================================== RCS file: /usr/local/cvsroot/openacs-4/packages/acs-api-browser/tcl/acs-api-documentation-procs.tcl,v diff -u -r1.30.2.21 -r1.30.2.22 --- openacs-4/packages/acs-api-browser/tcl/acs-api-documentation-procs.tcl 13 May 2016 18:00:05 -0000 1.30.2.21 +++ openacs-4/packages/acs-api-browser/tcl/acs-api-documentation-procs.tcl 14 May 2016 11:47:07 -0000 1.30.2.22 @@ -1473,7 +1473,7 @@ @return sanitized path } { set path [ns_normalizepath $path] - if {![string match "$prefix/*" $path]} { + if {![string match "/$prefix/*" $path]} { set filename "$::acs::rootdir/$path" ns_log notice [subst {INTRUDER ALERT:\n\nsomesone tried to snarf '$filename'! file exists: [file exists $filename] user_id: [ad_conn user_id] peer: [ad_conn peeraddr]