Set default options.
Protect against directory traversal.