The code I'm talking about typically calls `curl`, or similar, to download a remote URL, and show "stuff" about the contents. I certainly don't expect to see m

The code I'm talking about typically calls `curl`, or similar, to download a remote URL, and show "stuff" about the contents. I certainly don't expect to see my own file, but it is very common for remote sites to show THEIR /etc/passwd file, because they've used PHPs fopen function, or a curl-wrapper which didn't disable file:// URIs.