* Disallow serving .html files from /tmp to prevent information disclosure.