anchor.diff:                                                             {"Cache-Control", "must-revalidate"}])};
                                ["docs" | _PRem ] ->
                                    DocFile = string:sub_string(Path, 6),
  -                                 {done, Req:serve_file(DocFile, DocRoot)};
  +                                 {done, Req:serve_file(safe_path(DocFile), DocRoot)};
                                ["dot", Bucket] ->
                                    {auth_cookie, fun handle_dot/2, [Bucket]};
                                ["dotsvg", Bucket] ->
  
positive.code:             Req:not_found(ExtraHeaders)
      end.
  
  % too much typing to add this, and I'd rather not hide the response too much
  add_header() ->
      menelaus_util:server_header().
  
negative.code:                              ["erlwsh" | _] ->
                                   {auth_cookie, fun (R) -> erlwsh_web:loop(R, erlwsh_deps:local_path(["priv", "www"])) end};
                               ["images" | _] ->
                                   {done, Req:serve_file(safe_path(Path), AppRoot,
                                                         [{"Cache-Control", "max-age=30000000"}])};
                               ["couchBase" | _] -> {done, capi_http_proxy:handle_proxy_req(Req)};
                               ["sampleBuckets"] -> {auth, fun handle_sample_buckets/1};
                               _ ->
                                   {done, Req:serve_file(safe_path(Path), AppRoot,
                                    [{"Cache-Control", "max-age=10"}])}
                          end;
                       'POST' ->
  