Added directory traversal checks for assets