Reject paths with "." or ".." parts