newslog: dotdot removal in libcurl