Blacklist -> whitelist for staticFiles

Yesod/Helpers/Static.hs

@@ -153,9 +153,11 @@ staticFiles fp = do
     fs <- qRunIO $ getFileList fp
     concat `fmap` mapM go fs
   where
-    replace' '.' = '_'
-    replace' '-' = '_'
-    replace' c = c
+    replace' c
+        | 'A' <= c && c <= 'Z' = c
+        | 'a' <= c && c <= 'z' = c
+        | '0' <= c && c <= '9' = c
+        | otherwise = '_'
     go f = do
         let name = mkName $ intercalate "_" $ map (map replace') f
         f' <- lift f

yesod.cabal

@@ -1,5 +1,5 @@
 name:            yesod
-version:         0.6.3
+version:         0.6.3.1
 license:         BSD3
 license-file:    LICENSE
 author:          Michael Snoyman <michael@snoyman.com>