There is no security implication to that, if you try it yourself, you will see that all it returns is the root server page, which is public anyway. It does not actually proxy out. The only issue is perhaps that it wastes your server's bandwidth. I suppose I could add some code to the server to reject GET requests that dont start with /
|