prevents the full file path from being exposed to the api #5