Bug#840395: css ignored if located outside current or current/sub directory

[Philippe Cochy]

Package: librsvg2-2
Version: 2.40.16-1

The css stylesheet of an SVG file is ignored if located outside current
(or
sub) directory.

<?xml-stylesheet type="text/css" href="./stroke.css"?> is OK
<?xml-stylesheet type="text/css" href="./sub/stroke.css"?> is OK
<?xml-stylesheet type="text/css" href="../stroke.css"?> is ignored

-- System Information:
Debian Release: stretch/sid
  APT prefers testing
  APT policy: (500, 'testing')
Architecture: amd64 (x86_64)
Foreign Architectures: i386

Kernel: Linux 4.7.0-1-amd64 (SMP w/4 CPU cores)
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
Init: systemd (via /run/systemd/system)

Versions of packages librsvg2-2 depends on:
ii  libc6                2.24-3
ii  libcairo2            1.14.6-1+b1
ii  libcroco3            0.6.11-2
ii  libgdk-pixbuf2.0-0   2.36.0-1
ii  libglib2.0-0         2.50.0-2
ii  libpango-1.0-0       1.40.3-2
ii  libpangocairo-1.0-0  1.40.3-2
ii  libxml2              2.9.4+dfsg1-2

Versions of packages librsvg2-2 recommends:
ii  librsvg2-common  2.40.16-1

Versions of packages librsvg2-2 suggests:
pn  librsvg2-bin  <none>

-- no debconf information