requesting a directory listing from a malicious server over HTTP. From the `NEWS' file: * security fixes in html parsing code