fix invalid json string to number conversion
fix security issue with isMinetestPath returning true for relative paths starting with "/tmp"