Minor improvements to documentation.

Check the file path by canonicalizing it rather than checking for
presence of ".." or it being starting with "/".