Fixed #36. Potential security risk where relative paths would take a path outside of the defined root.