diff --git a/apps/commandboard-web/server.js b/apps/commandboard-web/server.js
index 6a61e34..a0d357f 100644
--- a/apps/commandboard-web/server.js
+++ b/apps/commandboard-web/server.js
@@ -48,7 +48,12 @@ createServer((request, response) => {
 });
 
 function resolveStaticPath(pathname) {
-  const decodedPath = decodeURIComponent(pathname);
+  let decodedPath;
+  try {
+    decodedPath = decodeURIComponent(pathname);
+  } catch {
+    return null;
+  }
   const normalizedPath = normalize(decodedPath).replace(/^(\.\.[/\\])+/, "");
   let candidate = join(distDirectory, normalizedPath);