working dir traversal test