https://blog.modpr0.be/2012/03/19/directory-traversal-with-dotdotpwn-https-mode/