static

Files from path are served under url_prefix. Path traversal is blocked: the canonicalized path must stay inside the directory. url_prefix must not be / and must not overlap /cms or any of your routes.