Allow URIs specified in file directives implicitly It seems to me that, by specifying that one wants to serve a given file at a specified URI, one is implying that this URI should be allowed.

fun main () : transaction page =
    s <- source 0;
    n <- get s;
    set s (n + 1);
    n' <- get s;
    return <xml>{[n']}</xml>