Added guard against path traversal
Updated eventbus url to be dynamic (but will only work on local machine)