Re:Nweb: a tiny, safe web server (static pages only)
by JasonFruit on Monday March 31, 2014 @10:31PM
(#7505798)
That may be, but the docs are quite nice; people who can write better code might still gain from considering how they can make their documentation this instructive.
It appears that if you request a path like "//etc/foobar" with two slashes at the front it'll allow traversal outside the starting directory, though it's mitigated by checking file extensions.