Added bounds check to escaped path