Don't serve URIs that represent folders as static files
Properly check if URI represents a directory (even if it doesn't end with a /)