Hey,

What would be a good way to protect a custom server against directory traversal attacks besides filtering [..], [%] characters?

Cheers,