Removed non-generic hard-coded path test

The uri.startsWith("src/main") || uri.endsWith("src/main") test is not useful in general cases, but potentially a bug.

1 files changed, 1 insertions, 1 deletions

diff --git a/webserver/src/main/java/fi/iki/elonen/SimpleWebServer.java b/webserver/src/main/java/fi/iki/elonen/SimpleWebServer.java
index a2396e8..8cae9a3 100644
--- a/webserver/src/main/java/fi/iki/elonen/SimpleWebServer.java
+++ b/webserver/src/main/java/fi/iki/elonen/SimpleWebServer.java
@@ -398,7 +398,7 @@ public class SimpleWebServer extends NanoHTTPD {
         }
 
         // Prohibit getting out of current directory
-        if (uri.startsWith("src/main") || uri.endsWith("src/main") || uri.contains("../")) {
+        if (uri.contains("../")) {
             return getForbiddenResponse("Won't serve ../ for security reasons.");
         }