URI#up_to_path: return if there's no path
Added source_code_disclosure audit module

[Closes #369]