diff --git a/server.js b/server.js
index 584836e..1617951 100644
--- a/server.js
+++ b/server.js
@@ -6,6 +6,11 @@ var http = require("http"),
   
       
 http.createServer(function(request, response) {
+    if (path.normalize(decodeURI(request.url)) !== decodeURI(request.url)) {
+        response.statusCode = 403;
+        response.end();
+        return;
+    }
  
     var Response = {
         "200":function(file, filename){