FIX: Dot filename segments permit directory traversal [issue 106]