This strip will by char match, so do we want to disallow uses of '../' here?