Fix directory traversal on download