Directory structure, xss, and absolute link