Yeah, you're rightit is resolved. But then I also noticed `root-dir` is given by the request.

Would a request like this also succeed?

 /log?tail=99999999&file=passwd&log-root=/etc