Just how retarded can I be?

even the message "sh: etags: not such file or directory" or whatever seems to be confusing for users, so silent it. (maybe it would be better not to automatically generate the TAGS, but it's so handy...)

Some particularly crafted IRIs can cause a denial of service (DOS). IRIs which have a trailing `..' segment and resolve to a valid IRI (i.e. a .. that's not escaping the root directory) will make the server process loop forever. This is """just""" an DOS vulnerability, it doesn't expose anything sensitive or give an attacker anything else.