Fix httpd directory traversal on Windows
Fix httpd directory traversal on Windows

Although the validation in httpd_request works well on platforms using
forward slash as directory separator, on Windows systems, this
protection can be circumvented using URLs containing backslashes.

This way, any file accessible to the user running the server (even
those outside the document root) can be read through HTTP. This commit
solves the problem by expanding the list of path separators to '/\\'.

emile/otp,lhslll/otp,enikki/otp,krishnakumar4a4/otp,johanclaesson/otp,vinoski/otp,kvakvs/otp,lucafavatella/otp,ahmedshafeeq/otp,g-andrade/otp,klarna/otp,vladdu/otp,fenollp/otp,erlang/otp,GinjaNinja32/otp,dumbbell/otp,uabboli/otp,bsmr-erlang/otp,saleyn/otp,stolen/otp,haguenau/otp,benoitc/otp-1,palas/otp,jemsbhai/otp,awetzel/otp,bsmr-erlang/otp,mikpe/otp,derek121/otp,lhslll/otp,NOMORECOFFEE/otp,sitexa/otp,massemanet/otp,c-rack/otp,dgud/otp,lantti/otp,paulcager/otp,lianghaivv/otp,johanclaesson/otp,msantos/otp,palas/otp,ahmedshafeeq/otp,rlipscombe/otp,cobusc/otp,matwey/otp,RJ/otp,electricimp/otp,bernardd/otp,c-rack/otp,aboroska/otp,mikpe/otp,RoadRunnr/otp,RichMorin/otp,johanclaesson/otp,palas/otp,riverrun/otp,derek121/otp,neeraj9/otp,getong/otp,beni55/otp,fenollp/otp,RaimoNiskanen/otp,saleyn/otp,msantos/otp,RGafiyatullin/otp,aboroska/otp,beni55/otp,getong/otp,erlang/otp,lucafavatella/otp,mikpe/otp,cnbin/otp,klarna/otp,theom/otp,paladim/otp,RJ/otp,enikki/otp,bernardd/otp,emacsmirror/erlang,basho/otp,VincentHHL/otp,emile/otp,bugs-erlang-org/otp,paladim/otp,jemsbhai/otp,RaimoNiskanen/otp,jj1bdx/otp,lightcyphers/otp,lrascao/otp,yangchengjian/otp,Teino1978-Corp/otp,lantti/otp,fenollp/otp,sdebnath/otp,isvilen/otp,release-project/otp,release-project/otp,getong/otp,RJ/otp,lrascao/otp,dumbbell/otp,erlang/otp,beni55/otp,jinshana/otp,stolen/otp,derek121/otp,uabboli/otp,aboroska/otp,jinshana/otp,beni55/otp,ader1990/otp,rlipscombe/otp,Teino1978-Corp/otp,bernardd/otp,yangchengjian/otp,aboroska/otp,bernardd/otp,mikpe/otp,bsmr-erlang/otp,yangchengjian/otp,legoscia/otp,tuncer/otp,basho/otp,fenollp/otp,goertzenator/otp,entropiae/otp,RJ/otp,goertzenator/otp,psyeugenic/otp,ferd/otp,RichMorin/otp,RaimoNiskanen/otp,dgud/otp,lucafavatella/otp,bugs-erlang-org/otp,electricimp/otp,basho/otp,beni55/otp,c-rack/otp,ader1990/otp,VincentHHL/otp,psyeugenic/otp,potatosalad/otp,entropiae/otp,bsmr-erlang/otp,vinoski/otp,legoscia/otp,lemenkov/otp,bugs-erlang-org/otp,massemanet/otp,uabboli/otp,theom/otp,vladdu/otp,stolen/otp,marquisthunder/otp,theom/otp,lianghaivv/otp,lrascao/otp,ader1990/otp,RGafiyatullin/otp,mujiatong/otp,matwey/otp,lrascao/otp,neeraj9/otp,sitexa/otp,electricimp/otp,getong/otp,erlang/otp,hairyhum/otp,getong/otp,potatosalad/otp,VincentHHL/otp,schlagert/otp,cnbin/otp,sammoth-wazoku/otp,platinumthinker/otp,riverrun/otp,VincentHHL/otp,aboroska/otp,isvilen/otp,RoadRunnr/otp,awetzel/otp,jj1bdx/otp,rlipscombe/otp,riverrun/otp,paladim/otp,derek121/otp,gjaldon/otp,sammoth-wazoku/otp,hairyhum/otp,massemanet/otp,paulcager/otp,g-andrade/otp,tuncer/otp,lantti/otp,krishnakumar4a4/otp,jinshana/otp,platinumthinker/otp,release-project/otp,haguenau/otp,psyeugenic/otp,VincentHHL/otp,vladdu/otp,RaimoNiskanen/otp,legoscia/otp,tuncer/otp,jinshana/otp,paulcager/otp,jj1bdx/otp,jamesruan/otp,NOMORECOFFEE/otp,lucafavatella/otp,haguenau/otp,paulcager/otp,awetzel/otp,theom/otp,saleyn/otp,emacsmirror/erlang,jemsbhai/otp,aboroska/otp,vic/otp,goertzenator/otp,ahmedshafeeq/otp,basho/otp,rlipscombe/otp,derek121/otp,GinjaNinja32/otp,g-andrade/otp,lemenkov/otp,NOMORECOFFEE/otp,neeraj9/otp,GinjaNinja32/otp,lemenkov/otp,vladdu/otp,sdebnath/otp,c-rack/otp,ader1990/otp,c-rack/otp,mikpe/otp,getong/otp,vic/otp,ahmedshafeeq/otp,dgud/otp,Teino1978-Corp/otp,stolen/otp,krishnakumar4a4/otp,kvakvs/otp,RoadRunnr/otp,gjaldon/otp,lightcyphers/otp,sammoth-wazoku/otp,msantos/otp,bernardd/otp,ahmedshafeeq/otp,uabboli/otp,tuncer/otp,riverrun/otp,jj1bdx/otp,RGafiyatullin/otp,awetzel/otp,platinumthinker/otp,emacsmirror/erlang,Teino1978-Corp/erlang-otp,GinjaNinja32/otp,RichMorin/otp,cobusc/otp,kvakvs/otp,msantos/otp,benoitc/otp-1,RichMorin/otp,gjaldon/otp,sitexa/otp,psyeugenic/otp,mikpe/otp,lucafavatella/otp,paladim/otp,benoitc/otp-1,beni55/otp,jinshana/otp,dumbbell/otp,goertzenator/otp,RGafiyatullin/otp,weisslj/otp,enikki/otp,weisslj/otp,krishnakumar4a4/otp,haguenau/otp,lhslll/otp,paulcager/otp,sitexa/otp,beni55/otp,emile/otp,tuncer/otp,marquisthunder/otp,msantos/otp,bsmr-erlang/otp,paladim/otp,release-project/otp,enikki/otp,bjorng/otp,emile/otp,emacsmirror/erlang,ahmedshafeeq/otp,sammoth-wazoku/otp,weisslj/otp,jinshana/otp,vic/otp,emile/otp,legoscia/otp,dgud/otp,benoitc/otp-1,vladdu/otp,lightcyphers/otp,mikpe/otp,rlipscombe/otp,ahmedshafeeq/otp,vladdu/otp,awetzel/otp,psyeugenic/otp,lightcyphers/otp,falkevik/otp,vinoski/otp,cnbin/otp,dumbbell/otp,sitexa/otp,emile/otp,bsmr-erlang/otp,GinjaNinja32/otp,saleyn/otp,tuncer/otp,release-project/otp,paladim/otp,aboroska/otp,weisslj/otp,neeraj9/otp,psyeugenic/otp,vinoski/otp,cobusc/otp,erlang/otp,neeraj9/otp,RaimoNiskanen/otp,lucafavatella/otp,haguenau/otp,dgud/otp,goertzenator/otp,platinumthinker/otp,ferd/otp,electricimp/otp,lianghaivv/otp,sitexa/otp,vinoski/otp,ader1990/otp,weisslj/otp,neeraj9/otp,c-rack/otp,paulcager/otp,schlagert/otp,fenollp/otp,falkevik/otp,mujiatong/otp,NOMORECOFFEE/otp,NOMORECOFFEE/otp,RaimoNiskanen/otp,potatosalad/otp,cobusc/otp,Teino1978-Corp/otp,sdebnath/otp,lianghaivv/otp,awetzel/otp,lantti/otp,dgud/otp,klarna/otp,Teino1978-Corp/otp,bjorng/otp,aboroska/otp,awetzel/otp,riverrun/otp,jemsbhai/otp,rlipscombe/otp,psyeugenic/otp,sitexa/otp,rlipscombe/otp,bjorng/otp,platinumthinker/otp,isvilen/otp,falkevik/otp,dumbbell/otp,goertzenator/otp,bugs-erlang-org/otp,tuncer/otp,dumbbell/otp,gjaldon/otp,GinjaNinja32/otp,emile/otp,palas/otp,bernardd/otp,msantos/otp,msantos/otp,fenollp/otp,marquisthunder/otp,ferd/otp,theom/otp,lianghaivv/otp,vinoski/otp,ferd/otp,bjorng/otp,jinshana/otp,potatosalad/otp,enikki/otp,bugs-erlang-org/otp,jinshana/otp,erlang/otp,sammoth-wazoku/otp,palas/otp,c-rack/otp,cnbin/otp,weisslj/otp,marquisthunder/otp,jemsbhai/otp,massemanet/otp,benoitc/otp-1,dumbbell/otp,lantti/otp,jemsbhai/otp,emacsmirror/erlang,Teino1978-Corp/erlang-otp,lemenkov/otp,jamesruan/otp,jamesruan/otp,electricimp/otp,VincentHHL/otp,platinumthinker/otp,jemsbhai/otp,kvakvs/otp,mujiatong/otp,derek121/otp,basho/otp,dumbbell/otp,mikpe/otp,jamesruan/otp,beni55/otp,vladdu/otp,ader1990/otp,mikpe/otp,sammoth-wazoku/otp,matwey/otp,stolen/otp,schlagert/otp,johanclaesson/otp,massemanet/otp,yangchengjian/otp,vinoski/otp,kvakvs/otp,massemanet/otp,basho/otp,RichMorin/otp,goertzenator/otp,dgud/otp,cnbin/otp,lantti/otp,rlipscombe/otp,VincentHHL/otp,goertzenator/otp,cnbin/otp,matwey/otp,massemanet/otp,jj1bdx/otp,jamesruan/otp,theom/otp,tuncer/otp,RaimoNiskanen/otp,dumbbell/otp,saleyn/otp,erlang/otp,platinumthinker/otp,electricimp/otp,bernardd/otp,bsmr-erlang/otp,falkevik/otp,vinoski/otp,riverrun/otp,platinumthinker/otp,ferd/otp,marquisthunder/otp,g-andrade/otp,saleyn/otp,lrascao/otp,hairyhum/otp,sdebnath/otp,dgud/otp,massemanet/otp,kvakvs/otp,krishnakumar4a4/otp,Teino1978-Corp/otp,klarna/otp,NOMORECOFFEE/otp,c-rack/otp,mujiatong/otp,RoadRunnr/otp,enikki/otp,weisslj/otp,haguenau/otp,klarna/otp,electricimp/otp,g-andrade/otp,vladdu/otp,vic/otp,falkevik/otp,ferd/otp,legoscia/otp,benoitc/otp-1,emacsmirror/erlang,bernardd/otp,Teino1978-Corp/erlang-otp,gjaldon/otp,cobusc/otp,jj1bdx/otp,NOMORECOFFEE/otp,erlang/otp,saleyn/otp,lemenkov/otp,gjaldon/otp,sdebnath/otp,isvilen/otp,saleyn/otp,schlagert/otp,legoscia/otp,sammoth-wazoku/otp,jj1bdx/otp,jj1bdx/otp,lantti/otp,Teino1978-Corp/otp,marquisthunder/otp,entropiae/otp,jamesruan/otp,bugs-erlang-org/otp,lucafavatella/otp,mujiatong/otp,basho/otp,sammoth-wazoku/otp,neeraj9/otp,mikpe/otp,bjorng/otp,cnbin/otp,Teino1978-Corp/erlang-otp,palas/otp,matwey/otp,vinoski/otp,erlang/otp,emile/otp,enikki/otp,NOMORECOFFEE/otp,lhslll/otp,dumbbell/otp,electricimp/otp,falkevik/otp,vic/otp,RoadRunnr/otp,ader1990/otp,kvakvs/otp,saleyn/otp,lightcyphers/otp,fenollp/otp,emacsmirror/erlang,benoitc/otp-1,johanclaesson/otp,marquisthunder/otp,schlagert/otp,rlipscombe/otp,falkevik/otp,johanclaesson/otp,rlipscombe/otp,dgud/otp,potatosalad/otp,electricimp/otp,RoadRunnr/otp,gjaldon/otp,haguenau/otp,jj1bdx/otp,emacsmirror/erlang,gjaldon/otp,lemenkov/otp,vic/otp,g-andrade/otp,Teino1978-Corp/erlang-otp,RichMorin/otp,lhslll/otp,isvilen/otp,theom/otp,isvilen/otp,lhslll/otp,lightcyphers/otp,potatosalad/otp,hairyhum/otp,paladim/otp,lrascao/otp,RJ/otp,lianghaivv/otp,potatosalad/otp,bernardd/otp,jj1bdx/otp,klarna/otp,sitexa/otp,matwey/otp,sdebnath/otp,potatosalad/otp,stolen/otp,potatosalad/otp,yangchengjian/otp,krishnakumar4a4/otp,uabboli/otp,release-project/otp,bsmr-erlang/otp,ferd/otp,GinjaNinja32/otp,bjorng/otp,g-andrade/otp,emile/otp,emacsmirror/erlang,riverrun/otp,uabboli/otp,RoadRunnr/otp,yangchengjian/otp,lemenkov/otp,bugs-erlang-org/otp,RaimoNiskanen/otp,derek121/otp,bsmr-erlang/otp,enikki/otp,bjorng/otp,falkevik/otp,stolen/otp,cnbin/otp,palas/otp,getong/otp,schlagert/otp,RoadRunnr/otp,paulcager/otp,uabboli/otp,entropiae/otp,RGafiyatullin/otp,cobusc/otp,lrascao/otp,lianghaivv/otp,getong/otp,RGafiyatullin/otp,emacsmirror/erlang,neeraj9/otp,massemanet/otp,lightcyphers/otp,lhslll/otp,ahmedshafeeq/otp,hairyhum/otp,ader1990/otp,isvilen/otp,vladdu/otp,jamesruan/otp,weisslj/otp,RGafiyatullin/otp,paulcager/otp,entropiae/otp,getong/otp,lightcyphers/otp,g-andrade/otp,krishnakumar4a4/otp,yangchengjian/otp,krishnakumar4a4/otp,isvilen/otp,GinjaNinja32/otp,legoscia/otp,goertzenator/otp,klarna/otp,ferd/otp,awetzel/otp,release-project/otp,erlang/otp,lantti/otp,cobusc/otp,release-project/otp,cobusc/otp,bjorng/otp,RJ/otp,derek121/otp,dgud/otp,mujiatong/otp,entropiae/otp,basho/otp,entropiae/otp,jemsbhai/otp,potatosalad/otp,schlagert/otp,isvilen/otp,yangchengjian/otp,schlagert/otp,uabboli/otp,vic/otp,uabboli/otp,vic/otp,hairyhum/otp,ferd/otp,Teino1978-Corp/otp,legoscia/otp,johanclaesson/otp,aboroska/otp,bjorng/otp,hairyhum/otp,weisslj/otp,lrascao/otp,entropiae/otp,sdebnath/otp,lianghaivv/otp,RGafiyatullin/otp,RaimoNiskanen/otp,mujiatong/otp,tuncer/otp,getong/otp,jamesruan/otp,RJ/otp,Teino1978-Corp/erlang-otp,release-project/otp,lemenkov/otp,psyeugenic/otp,Teino1978-Corp/erlang-otp,johanclaesson/otp,RoadRunnr/otp,hairyhum/otp,haguenau/otp,matwey/otp,mujiatong/otp,matwey/otp,ahmedshafeeq/otp,msantos/otp,VincentHHL/otp,vinoski/otp,Teino1978-Corp/erlang-otp,isvilen/otp,stolen/otp,lucafavatella/otp,RichMorin/otp,kvakvs/otp,sdebnath/otp,RichMorin/otp,RJ/otp,klarna/otp,legoscia/otp,paladim/otp,matwey/otp,palas/otp,lrascao/otp,benoitc/otp-1,falkevik/otp,g-andrade/otp,fenollp/otp,marquisthunder/otp,g-andrade/otp,kvakvs/otp,riverrun/otp,fenollp/otp,theom/otp,bjorng/otp,bugs-erlang-org/otp,lhslll/otp,basho/otp