[JadeNB]

> I'm amazed that directory traversal wasn't disabled.

Why would it have been? It seems intended to be navigated by visitors.