Remove .. from paths before comparing to allowed roots