diff --git a/routers/static_filter.go b/routers/static_filter.go
index b3248cf6c86a..a1075f934bfd 100644
--- a/routers/static_filter.go
+++ b/routers/static_filter.go
@@ -129,7 +129,7 @@ func StaticFilter(ctx *context.Context) {
 		path += urlPath
 	}
 
-	if !util.FileExist(path) {
+	if strings.Contains(path, "/../") || !util.FileExist(path) {
 		path = webBuildFolder + "/index.html"
 	}
 	if !util.FileExist(path) {