fixed directory traversal vulnerability w/ apathy
bumping to 0.1.2