diff --git a/src/Ui/UiRequest.py b/src/Ui/UiRequest.py index d7a89838..48c56c61 100644 --- a/src/Ui/UiRequest.py +++ b/src/Ui/UiRequest.py @@ -267,7 +267,7 @@ class UiRequest(object): if match: address = match.group("address") inner_path = match.group("inner_path").lstrip("/") - if "." in inner_path and not inner_path.endswith(".html"): + if "." in inner_path and not inner_path.endswith(".html") and not inner_path.endswith(".htm"): return self.actionSiteMedia("/media" + path) # Only serve html files with frame if self.isAjaxRequest(): return self.error403("Ajax request not allowed to load wrapper") # No ajax allowed on wrapper