100% test coverage and a security fix

Thanks to the new tests I noticed that /polling allowed access to files
outside the sandbox.  It would probably allow an attacker to check for
existence/readability of arbitrary files on the filesystem.