prevent possible directory traversal attack

e.g. add request with value "../../../../../../../../TEST" result in
~/TEST.xml