--- parser3/src/include/pa_request.h	2026/09/25 17:03:52	1.275
+++ parser3/src/include/pa_request.h	2026/10/01 12:46:17	1.281
@@ -8,10 +8,11 @@
 #ifndef PA_REQUEST_H
 #define PA_REQUEST_H
 
-#define IDENT_PA_REQUEST_H "$Id: pa_request.h,v 1.275 2026/09/25 17:03:52 moko Exp $"
+#define IDENT_PA_REQUEST_H "$Id: pa_request.h,v 1.281 2026/10/01 12:46:17 moko Exp $"
 
 #include "pa_pool.h"
 #include "pa_hash.h"
+#include "pa_file.h"
 #include "pa_wcontext.h"
 #include "pa_value.h"
 #include "pa_vhash.h"
@@ -147,6 +148,8 @@ private:
 
 	/// endless execute(execute(... preventing counter
 	int anti_endless_execute_recursion;
+	int execute_recursion_limit;
+	void recursion_limit_reached();
 
 	///@}
 
@@ -243,14 +246,18 @@ public:
 
 	/// execute ops with anti-recursion check
 	void recursion_checked_execute(ArrayOperation& ops) {
-		if(++anti_endless_execute_recursion>=pa_execute_recursion_limit) {
-			anti_endless_execute_recursion=0; // give @exception a chance
-			throw Exception(PARSER_RUNTIME, 0, "call canceled - endless recursion detected");
-		}
+		if(++anti_endless_execute_recursion>=execute_recursion_limit)
+			recursion_limit_reached();
 		execute(ops); // execute it
 		anti_endless_execute_recursion--;
 	}
 
+	/// take the recovery reserve back if recursion limit is far enough
+	void recursion_limit_try_restore() {
+		if(execute_recursion_limit>pa_execute_recursion_limit && anti_endless_execute_recursion<pa_execute_recursion_limit/2)
+			execute_recursion_limit=pa_execute_recursion_limit;
+	}
+
 	///
 	void use_file_directly(const String& file_spec, bool fail_on_file_absence=true, bool with_auto_p=false);
 
@@ -296,7 +303,10 @@ public:
 	/// returns relative to @a path  path to @a file 
 	const String& relative(const char* apath, const String& relative_name);
 
-	const String& full_disk_path(const String& relative_name);
+	/// '/'-normalized disk path of a file name; a uri of another scheme is returned as is if allowed, otherwise throws
+	const String& full_disk_path(const String& relative_name, uint allowed=0);
+	/// '/'-normalized full_disk_path of a real file on disk, which does not throw: 0 for a uri or a remote, invalid or tainted file:// one
+	const String* real_disk_path(const String& name);
 
 	/// returns the mime type of 'user_file_name'
 	const String& mime_type_of(const String* file_name);
@@ -450,7 +460,7 @@ class Request_context_saver {
 
 	/// execution stack
 	size_t stack;
-	uint anti_endless_execute_recursion;
+	int anti_endless_execute_recursion;
 	/// contexts
 	VMethodFrame* method_frame;
 	Value* rcontext;