FS#2111, improve security check

only concerned with relative 'savedir' values, but not relative values which move up the directory tree, prefixed '../' (could that expose information unnecessarily?)