Added checking for request outside current directory. Check for filename beginning with / or ~.