-page-....-2f-2f....-2f-2f....-2f-2fetc-2fpasswd [EASY — Anthology]
The most effective defense is to restrict user input to a predefined list of acceptable values. If the application only needs to load specific pages, validate the input against a strict whitelist.