3 files changed, 19 insertions, 0 deletions
diff --git a/tests/pkgs/static_abspath_nulbyte/__init__.py b/tests/pkgs/static_abspath_nulbyte/__init__.py
new file mode 100644
index 000000000..a946fcdf9
--- /dev/null
+++ b/tests/pkgs/static_abspath_nulbyte/__init__.py
@@ -0,0 +1,10 @@
+import os
+
+
+def includeme(config):
+    here = here = os.path.dirname(__file__)
+    static
+    static = os.path.normpath(
+        os.path.join(here, '..', '..', 'fixtures', 'statc')
+    )
+    config.add_static_view('/', static)
diff --git a/tests/pkgs/static_assetspec_nulbyte/__init__.py b/tests/pkgs/static_assetspec_nulbyte/__init__.py
new file mode 100644
index 000000000..49cebab3e
--- /dev/null
+++ b/tests/pkgs/static_assetspec_nulbyte/__init__.py
@@ -0,0 +1,2 @@
+def includeme(config):
+    config.add_static_view('/', 'tests:fixtures/static')
diff --git a/tests/test_integration.py b/tests/test_integration.py
index 0b55872d2..184368214 100644
--- a/tests/test_integration.py
+++ b/tests/test_integration.py
@@ -220,10 +220,17 @@ class TestEventOnlySubscribers(IntegrationBase, unittest.TestCase):
 class TestStaticAppUsingAbsPath(StaticAppBase, unittest.TestCase):
     package = 'tests.pkgs.static_abspath'
 
+    def test_nulbyte_chroot(self):
+        super_w_null = '/static/..\x00/'
+        res = self.testapp.get(f'/{super_w_null}', status=404)
+
 
 class TestStaticAppUsingAssetSpec(StaticAppBase, unittest.TestCase):
     package = 'tests.pkgs.static_assetspec'
 
+    def test_nulbyte_chroot(self):
+        super_w_null = 'static/..\x00/'
+        res = self.testapp.get(f'/{super_w_null}', status=404)
 
 class TestStaticAppWithEncodings(IntegrationBase, unittest.TestCase):
     package = 'tests.pkgs.static_encodings'