Check for /../ in static file handler

Prevent someone from calling for /../../../root_file