give correct working path
allow cross site scripting, this allow doing javascript app checking logs