Add warning about directory traversal