Avoid path traversal with "../"-filenames