[security] view was giving web access to every fs file accessible by the web server process. Fix this security hole by storing file in session data, not direct form parameters

     1

\.svn

     2

^build$

     3

^dist$

     4

\.pyc$

     5

\.pyo$

     6

\.bak$

     7

\.old$

     8

\~$

     9

\#.*?\#$

    10

\.swp$

    11

^doc/book/en/apidoc$