410405 Avoid NPE for requestDispatcher(../)

Added extra tests for dotdot and encoded dotdot.
Also protected against dotdot in absolute URIs
408806 getParameter returns null on Multipart request if called before request.getPart()/getParts()