/app/src/insecure/assets/
../
urls