Traversal Trap

A download handler joins the public directory with a user-controlled filename.

Begin with the deployment handover supplied with the document service. Use its release inventory and the handler's responses to review access to the internal acceptance marker.