fixed directory traversal vulnerability
removed unused components