untaint path
Merge pull request #25 from rubys/safe_path

untaint path