compute abspath to verify no path manipulation occurs