change regex checking file request ensure other files can not be accessed

services/clsi/app/coffee/StaticServerForbidSymlinks.coffee

@@ -9,8 +9,8 @@ module.exports = ForbidSymlinks = (staticFn, root, options) ->
 	basePath = Path.resolve(root)
 	return (req, res, next) ->
 		path = url.parse(req.url)?.pathname
-		# check that the path is of the form /project_id/path/to/file
-		if result = path.match(/^\/?(\w+)\/(.*)/)
+		# check that the path is of the form /project_id_or_name/path/to/file.log
+		if result = path.match(/^\/?([a-zA-Z0-9_-]+)\/(.*)/)
 			project_id = result[1]
 			file = result[2]
 		else

services/clsi/test/unit/coffee/StaticServerForbidSymlinksTests.coffee

@@ -134,6 +134,17 @@ describe "StaticServerForbidSymlinks", ->
 				done()
 			@StaticServerForbidSymlinks @req, @res
 
+	describe "with a github style path", ->
+		beforeEach ->
+			@req.url = "/henryoswald-latex_example/output/output.log"
+			@fs.realpath = sinon.stub().callsArgWith(1, null, "#{@settings.path.compilesDir}/henryoswald-latex_example/output/output.log")
+
+		it "should call next", (done)->
+			@res.sendStatus = (resCode)->
+				resCode.should.equal 200
+				done()
+			@StaticServerForbidSymlinks @req, @res, done
+
 	describe "with an error from fs.realpath", ->
 
 		beforeEach ->