ServeFileHandler is not directory traversal vulnerability safe.