testing path traversal methods