HTTH-873 — A request cannot escape from a subdirectory
Instead of passing a request to a server, the http-proxy can reply to a request by content of a local file. The files accessible this way are limited to a file system subtree by configuration. A request URI must not escape from this subtree, hence it must not contain references to a parent directory (e.g., /../../file.html).