Changed rules

• A client request page ./../
• The general location is c:/wwwroot/

• The server will only send the index of c:/

• The server will close the connection

• The location /. means one level down (C:/wwwroot/./ = c:/wwwroot/), ../ means 2 levels down (c:/wwwroot/../ = c:/).
  The server already had protection for the requested location (see here), but it didn't handle ./ as one level down but as one level up.