Currently, any path containing the characters .. will result in a Boom.forbidden() response.
While this prevents serving files from unauthorized directories, it seems rather excessive and counter-intuitive. For instance this prevents misc..txt from being served.
Currently, any path containing the characters
..will result in aBoom.forbidden()response.While this prevents serving files from unauthorized directories, it seems rather excessive and counter-intuitive. For instance this prevents
misc..txtfrom being served.