Stop considering parent URLs as public file

Editor assessment

This header-only fix is a good example of a subject doing most of the work: 'stop considering parent URLs as public file' names both the faulty behavior and its domain, is lowercase, imperative, and free of padding, though the missing article before 'public file' makes it read slightly rough. Given this touches the filesystem-serving boundary—adjacent to the fs.allow security surface—a scope like server and a body explaining the exploit or misbehavior would have been valuable; a fix in that area is exactly where future auditors will want the reasoning recorded. The fix type is correctly chosen and implies a patch release. Structure is minimal but valid, since the spec requires no body. Compact and functional, yet missing the context this particular area of the codebase deserves.