Minor improvements to documentation.
Check the file path by canonicalizing it rather than checking for
presence of ".." or it being starting with "/".