Make @removeslash a no-op when applied to a request for '/'.

This prevents a redirect loop as browsers interpret an empty redirect
as a redirect to /.

diff --git a/tornado/web.py b/tornado/web.py
index 01ba81bb6cdaa0723913c1780d9441866ed451dd..904336edd16953a84bdb1ba358fedfeb73c8480e 100644 (file)
--- a/tornado/web.py
+++ b/tornado/web.py
@@ -954,10 +954,12 @@ def removeslash(method):
         if self.request.path.endswith("/"):
             if self.request.method in ("GET", "HEAD"):
                 uri = self.request.path.rstrip("/")
-                if self.request.query: uri += "?" + self.request.query
-                self.redirect(uri)
-                return
-            raise HTTPError(404)
+                if uri:  # don't try to redirect '/' to ''
+                    if self.request.query: uri += "?" + self.request.query
+                    self.redirect(uri)
+                    return
+            else:
+                raise HTTPError(404)
         return method(self, *args, **kwargs)
     return wrapper