I noticed there are number of checks for "..". But I just want to filter out such ID on high level (upnp action handler). 
Specials and direct paths are not allowed.
What is we  remap specials:// to something safe in upnproot?