<% String file = request.getParameter("file");
if (file != null &&
file.matches("20[0-9][0-9]/.*(htm|html|HTM|HTML)") &&
!file.matches(".*\\.\\./.*") &&
(new java.io.File(pageContext.getServletContext().getRealPath("news/" + file))).exists()
) {
%>
<% } %>