Added directory transversal tests, and fixed a null exception on bad requests (thanks, tests!)