ditto for path traversal.