Prefent users from downloading any file

With this commit i am fixng a security issue
with nested paths. Now users are not able to
download any file they want from the server
anymore.

Signed-off-by: Leo Unglaub <leo@leo-unglaub.net>