add fancy-server dir traversal vuln