Answer with 403 Forbidden if .. is in asset_path