security feature to avoid directory traversal added