added '..' navigation for directory traversal