Add built-in CGI mode with INDEX.txt search, url_decode, and result limiting. Harden against XSS, path traversal, NUL injection, field injection, and javascript: URIs. Use pledge(2) and unveil(2) on OpenBSD to restrict filesystem access and syscalls.