Don't add '.' to files from the current working dir.
Use a character set to validate paths.