The PathAndQuery already contains the leading slash, which erroneously sets the proxied path to "//.." and not "/..".