Yes, but multiple periods in a row allow the user to escape from the current directory. Currently, your method makes multiple URLs valid to go to a page, which isn't really clean/ideal. Better to create a filter for multiple sequential periods (throw a 404 if breaks) then leave the period in the permissible routes, as you've done.