INDY : idHTTPserver directory traversal

... in URL allows access to any file on the server...