anchor.diff:  	yaws ->
   	    do_yaws(CliSock, GC, SC, Req, H, 
   		    ARG#arg{querydata = UT#urltype.q}, UT, N);
  -	dotdot ->
  +	forbidden ->
   	    deliver_403(CliSock, Req, GC, SC);
   	redir_dir ->
   	     deliver_303(CliSock, Req, GC, SC);
  
positive.code:     slash;
  split_path(SC, [$/, $/ |Tail], Comps, Part) ->  %% security clause
      split_path(SC, [$/|Tail], Comps, Part);
  split_path(SC, [$/, $., $., $/ |Tail], _, [_H|T]) ->  %% security clause
      split_path(SC, Tail, [], T);
  split_path(_SC, [$/, $., $., $/ |_Tail], _, []) -> %% security clause
      dotdot;
  split_path(SC, [], Comps, Part) ->
      ret_reg_split(SC, Comps, Part, []);
  split_path(SC, [$?|Tail], Comps, Part) ->
  
negative.code: deliver_403(CliSock, _Req, GC, SC) ->
      set_status_code(403),
      make_date_and_server_headers(),
      B = list_to_binary("<html> <h1> 403 Forbidden</h1></html>"),
      make_connection_close(true),
      make_content_length(size(B)),
      make_content_type(),
  