title: Mojolicious and directory traversal
body: <p>I am new to Mojolicious and trying to build a tiny webservice using this framework ,
  I wrote the below code which render some file remotely</p>
  
  <pre><code>use Mojolicious::Lite;
  use strict;
  use warnings;
  
  
  
  app-&gt;static-&gt;paths-&gt;[0]='C:\results';
       get '/result' =&gt; sub {
  
         my $self = shift;
         my $headers = $self-&gt;res-&gt;headers;
        $headers-&gt;content_type('text/zip;charset=UTF-8');
  
         $self-&gt;render_static('result.zip');
  
      };
  
      app-&gt;start;
  </code></pre>
  
  <p>but it seems when i try to fetch the file using the following url:</p>
  
  <pre><code>http://mydomain:3000/result/./../result
  </code></pre>
  
  <p>i get the file .</p>
  
  <p>is there any option on mojolicious to prevent such directory traversal?</p>
  
  <p>i.e in the above case i want only </p>
  
  <pre><code>http:/mydomain:300/result
  </code></pre>
  
  <p>to serve the page if someone  enter this url :</p>
  
  <pre><code>http://mydomain:3000/result/./../result
  </code></pre>
  
  <p>the page should not be served .
  is it possoible to do this ?</p>