Allow URIs specified in file directives implicitly It seems to me that, by specifying that one wants to serve a given file at a specified URI, one is implying that this URI should be allowed.

fun main () : transaction page =
    let
        val x = 1
        val y = "Hello"
        val z = 3.45
    in
        return <xml>{[x]}, {[y]}, {[z]}</xml>
    end