PAYLOAD='../../../admin' URI=resource://backend/users/..%2F..%2F..%2Fadmin/profile RESULT: BLOCKED or SAFE PAYLOAD='..%2F..%2Fadmin' URI=resource://backend/users/..%252F..%252Fadmin/profile RESULT: BLOCKED or SAFE PAYLOAD='normal' URI=resource://backend/users/normal/profile RESULT: BLOCKED or SAFE