Web server root directory configuration is not safe