allow paths with slashes and dots

as long as each part of the path starts with a word character
Merge pull request #364 from rubys/untaint_require_paths

allow paths with slashes and dots