WS-2019-0050

serve handler versions before 5.0.3 has XSS via HTML tag injection in directory lisiting page...