Changes escape detection to normalized prefix comp

@astrieanna makes a good case for wanting to preserve legitimate uses of '/../' that do not result in directory escape.  Results in 1 less problem.