r.createWebClient().assertFails("plugin/credentials/images/%2E%2E/images/24x24/credentials.png",HttpServletResponse.SC_INTERNAL_SERVER_ERROR);// IAE from TokenList.<init>
r.createWebClient().assertFails("plugin/credentials/images/%25252E%25252E/images/24x24/credentials.png",HttpServletResponse.SC_NOT_FOUND);// just checking