Fixes #5 (directory traversal) 

by returning the shared directory if a location above the shared directory is requested