security enforcement against directory traversal attacks