Fixed security bug that allowed exluding files outside form actions and templates
Merge pull request #4 from nijave/maintenance

Include security bug fix