[close #94] Security Update

Prevent specially crafted url strings from being used to access unintended files via an escaped slash character `%2e`