disallowing relative-up paths. closes #4