Update lib/rack/directory.rb

fix XSS