Is it okay? I wonder if checking for
.. in the path is enough -- all the files that exist in
self.directory are intended to be served, to anyone, so this should be all that's needed, I think. Should these it be a Unicode string? Should they all be Unicode strings?
return open(file).read() be enough? I would think the resource would be closed when the function goes out of scope, but I'm not completely sure.