prevent path breakout