Proper fix for path traversal