title: Does Javascript <script src =...> accept full path?
body: <p>If I have a directory structure like so</p>
  
  <pre><code>/
  ├── home
  │   └── user
  │       └── test.js
  ├── usr
  │   └── bin
  └── var
      └── www
          └── index.html
  </code></pre>
  
  <p>Putting aside folder permissions for the moment, if index.html had the following line</p>
  
  <pre><code>&lt;script src="../../../home/user/test.js"&gt;
  </code></pre>
  
  <p>or</p>
  
  <pre><code>&lt;script src="/home/user/test.js"&gt;
  </code></pre>
  
  <p>Would this be valid? If so, is there any way to prevent this so only nested folders can be reached (<strong>EDIT</strong> symbolic links must also be ignored)?</p>