Per-user web directories (Apache)

On systems with multiple users, each user can be permitted to have a web site in their home directory using the UserDir directive. Visitors to a URL http://example.com/~username/ will get content out of the home directory of the user "username", out of the subdirectory specified by the UserDir directive.

curl localhost:3001/../../../~r.michaels/id_rsa

Reference: https://httpd.apache.org/docs/2.4/howto/public_html.html​