Add basic directory traversal protection