fix directory traversal