[new_client]: Minor security fix to ensure that the 'next' path cannot be relative