/ext/cgi/
../
escape