@minrk... I have people trying to load js files from a static folder next to a notebook... I can see the redirection from notebook/static to files/static and the css is loaded and read by the notebook but not the JS (they are using IPython.display HTML to show the html containing script tag loading the js). I can see the JS in localhost:8889/files/static/blabla.js, but the jsconsole warn about not being "read" (Reference errors). Could be this behavior because of the sanitization by caja?