WS-2020-0125

django-sendfile2 currently relies on the backend to correctly limit file paths to "SENDFILEROOT". This is not the case for the "simple" and "development" backends, it is also not necessarily the case for any of the other backends either it's just an assumption that was made by the original author...