Fixes #5 (directory traversal) by returning the shared directory if a location above the shared directory is requested