Disallow requests to paths lower than the docroot