localization: Use filtered superglobal access only

In addition we filter out / \ and ..