Adds directory traversal in send

I just requested a CVE, will wait for that until publish