mention which methods do not protect from traversing to parent directories