describe('when the path contains ".."', function () {
      it('returns 403', function () {
        return callApp(app, '/../etc/passwd').then(function (conn) {
          expect(conn.status).toEqual(403);
        });